[{"data":1,"prerenderedAt":5449},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-7781":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":249,"related":263},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T02:29:21.454Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T02:28:06.466Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"repository",{"id":77,"slug":78,"gitlabProjectId":79,"name":80,"pathWithNamespace":81,"description":82,"webUrl":83,"commitSha":84,"commitUrl":85,"lastActivityAt":86,"headCommittedAt":87,"tree":88,"files":90,"resolvedComponentCount":114,"artifactResolvedComponentCount":115,"exactManifestPinCount":116,"packageCount":115,"ecosystems":117,"aiPackageCount":34,"licenseExpressionCount":35,"unknownLicensePackageCount":32,"advisoryIds":120,"advisoryCount":244,"providers":245},"opencode:7781","opencode-7781",7781,"kiva-llm-gateway","baden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway",null,"https:\u002F\u002Fgitlab.opencode.de\u002Fbaden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway","4a5cd798be9b97cc1bff7b30d930eafda774e380","https:\u002F\u002Fgitlab.opencode.de\u002Fbaden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway\u002F-\u002Fcommit\u002F4a5cd798be9b97cc1bff7b30d930eafda774e380","2026-02-16T10:16:43.002Z","2025-11-28T12:50:28.000Z",{"complete":45,"entryCount":49,"truncated":89},true,[91,99,108],{"path":92,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":84,"contentSha256":96,"byteCount":97,"state":98,"componentCount":37},"litellm-proxy-extras\u002Fpoetry.lock","poetry-lock","f526fec8da08bca1d0d68185019f27f685f90622","https:\u002F\u002Fgitlab.opencode.de\u002Fbaden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway\u002F-\u002Fblob\u002F4a5cd798be9b97cc1bff7b30d930eafda774e380\u002Flitellm-proxy-extras\u002Fpoetry.lock","7aacdd2d6bddd29e968ce7bc8a8d6d1bad7e45a49b3f9c5578218167369ecc43",261,"empty",{"path":100,"kind":101,"blobSha":102,"sourceUrl":103,"commitSha":84,"contentSha256":104,"byteCount":105,"state":106,"componentCount":107},"package-lock.json","npm-lock","b271c5aa628f397574e5e80367ab07fe4049b4ca","https:\u002F\u002Fgitlab.opencode.de\u002Fbaden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway\u002F-\u002Fblob\u002F4a5cd798be9b97cc1bff7b30d930eafda774e380\u002Fpackage-lock.json","d294856f064f2df8e74e9938d8f1f07f410acbc4071ec9e1a71d093eb5f1ebc3",8409,"parsed",22,{"path":55,"kind":93,"blobSha":109,"sourceUrl":110,"commitSha":84,"contentSha256":111,"byteCount":112,"state":106,"componentCount":113},"48f984e4d97ce607df0ee30b09a8e1e4c935e9db","https:\u002F\u002Fgitlab.opencode.de\u002Fbaden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway\u002F-\u002Fblob\u002F4a5cd798be9b97cc1bff7b30d930eafda774e380\u002Fpoetry.lock","6b6c7f6f3e100b48b887d7b16e1a7cd9be71e2de24e5221fe66df332d05d305b",395314,188,212,210,2,[118,119],"npm","pypi",[121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243],"GHSA-248v-346w-9cwc","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2vrm-gr82-f7m5","GHSA-2xpw-w6gg-jr37","GHSA-38jv-5279-wg99","GHSA-3wq7-rqq7-wx6j","GHSA-48p4-8xcf-vxj5","GHSA-4fvr-rgm6-gqmc","GHSA-4g5m-c9r5-49xf","GHSA-4m7w-qmgq-4wj5","GHSA-4xgf-cpjx-pc3j","GHSA-4xpc-pv4p-pm3w","GHSA-5239-wwwm-4pmq","GHSA-537c-gmf6-5ccf","GHSA-53mr-6c8q-9789","GHSA-54jq-c3m8-4m76","GHSA-597g-3phw-6986","GHSA-59g5-xgcq-4qw3","GHSA-5jmr-gcrj-2c9q","GHSA-5rvq-cxj2-64vf","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-63vm-454h-vhhq","GHSA-65pc-fj4g-8rjx","GHSA-69f9-5gxw-wvc2","GHSA-69x8-hrgq-fjj8","GHSA-6hr6-w5qg-qmwg","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6w46-j5rx-g56g","GHSA-72m8-9m7m-h278","GHSA-7488-6r32-c95q","GHSA-752w-5fwx-jx9f","GHSA-79v4-65xg-pq4g","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-82w8-qh3p-5jfq","GHSA-847f-9342-265h","GHSA-86qp-5c8j-p5mr","GHSA-8ppf-4f7h-5ppj","GHSA-8qvm-5x2c-j2w7","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-993g-76c3-p5m4","GHSA-9h52-p55h-vw2f","GHSA-9hjg-9r4m-mvj7","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c427-h43c-vf67","GHSA-cpwx-vrp4-4pq7","GHSA-cq5v-8q36-5273","GHSA-f96h-pmfr-66vw","GHSA-fh2c-86xm-pm2x","GHSA-fh55-r93g-j68g","GHSA-fhv5-28vv-h8m8","GHSA-fj7x-q9j7-g6q6","GHSA-fjcf-3j3r-78rp","GHSA-g3cq-j2xw-wf74","GHSA-g6cj-pr64-35w5","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-h4gh-qq45-vh27","GHSA-h75v-3vvj-5mfj","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hm4w-wwcw-mr6r","GHSA-hp6r-r9vc-q8wx","GHSA-hpj7-wq8m-9hgp","GHSA-hx9q-6w63-j58v","GHSA-jg22-mg44-37j8","GHSA-jj3x-wxrx-4x23","GHSA-jjhc-v7c2-5hh6","GHSA-jm66-cg57-jjv5","GHSA-jp82-jpqv-5vv3","GHSA-jpw9-pfvf-9f58","GHSA-jq35-7prp-9v3f","GHSA-jr27-m4p2-rc6r","GHSA-jwv3-5hgf-82ww","GHSA-m2h6-j472-rp4c","GHSA-m4p7-r5rc-7g4j","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-m959-cc7f-wv43","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mfx4-hv73-q22v","GHSA-mj87-hwqh-73pj","GHSA-mq44-7p77-q5h7","GHSA-mqqc-3gqh-h2x8","GHSA-mrfv-m5wm-5w6w","GHSA-mwh4-6h8g-pg8w","GHSA-p423-j2cm-9vmq","GHSA-p998-jp59-783m","GHSA-pp6c-gr5w-3c5g","GHSA-pq67-6m6q-mj2v","GHSA-q2x7-8rv6-6q7h","GHSA-qccp-gfcp-xxvc","GHSA-qmgc-5h2g-mvrw","GHSA-qrc4-49gv-mv9m","GHSA-r6ph-v2qm-q3c2","GHSA-v9pg-7xvm-68hf","GHSA-vffw-93wf-4j4q","GHSA-vj7q-gjh5-988w","GHSA-vqfr-h8mv-ghfj","GHSA-w2fm-2cpv-w7v5","GHSA-w7vc-732c-9m39","GHSA-w853-jp5j-5j7f","GHSA-w8v5-vhqr-4h9v","GHSA-wp53-j4wj-2cfg","GHSA-wpfp-gwwc-vwq6","GHSA-wqp7-x3pw-xc5r","GHSA-x746-7m8f-x49c","GHSA-xcgm-r5h9-7989","GHSA-xgmm-8j9v-c9wx","PYSEC-2025-183","PYSEC-2026-2120","PYSEC-2026-2121","PYSEC-2026-2132",123,[246],{"id":247,"label":248},"openai","OpenAI",{"files":250,"occurrenceCount":114},[251,256,260,261,262],{"path":252,"kind":253,"sourceUrl":254,"commitSha":84,"blobSha":255,"state":106,"componentCount":32},".circleci\u002Frequirements.txt","exact-manifest-pin","https:\u002F\u002Fgitlab.opencode.de\u002Fbaden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway\u002F-\u002Fblob\u002F4a5cd798be9b97cc1bff7b30d930eafda774e380\u002F.circleci\u002Frequirements.txt","8cd14de91897e92bad723cfba06c0084f919e9a8",{"path":257,"kind":253,"sourceUrl":258,"commitSha":84,"blobSha":259,"state":106,"componentCount":32},"docker\u002Fbuild_from_pip\u002Frequirements.txt","https:\u002F\u002Fgitlab.opencode.de\u002Fbaden-wuerttemberg\u002Finnenministerium\u002Fkiva.platform\u002Fkiva-llm-gateway\u002F-\u002Fblob\u002F4a5cd798be9b97cc1bff7b30d930eafda774e380\u002Fdocker\u002Fbuild_from_pip\u002Frequirements.txt","71e038b62670a19b1c2d641b48f120ac3ef72546",{"path":92,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":84,"contentSha256":96,"byteCount":97,"state":98,"componentCount":37},{"path":100,"kind":101,"blobSha":102,"sourceUrl":103,"commitSha":84,"contentSha256":104,"byteCount":105,"state":106,"componentCount":107},{"path":55,"kind":93,"blobSha":109,"sourceUrl":110,"commitSha":84,"contentSha256":111,"byteCount":112,"state":106,"componentCount":113},{"packages":264,"vulnerabilities":2151},[265,276,285,295,304,315,326,336,346,356,365,376,385,395,404,413,423,432,441,450,460,469,478,487,495,504,515,524,533,542,551,560,570,579,588,596,605,613,621,630,639,648,657,667,676,685,693,702,711,720,729,738,747,756,765,774,783,792,801,811,820,829,838,847,856,865,874,883,892,901,911,920,929,938,947,956,964,973,982,991,1000,1009,1018,1026,1035,1044,1053,1062,1071,1080,1089,1098,1107,1116,1125,1134,1143,1152,1161,1170,1179,1187,1195,1204,1213,1222,1231,1240,1249,1258,1267,1275,1284,1292,1301,1309,1317,1326,1335,1344,1355,1364,1373,1382,1391,1399,1407,1415,1423,1431,1439,1448,1458,1467,1476,1484,1493,1502,1511,1519,1527,1537,1546,1555,1564,1573,1582,1591,1600,1609,1618,1627,1636,1645,1654,1663,1672,1680,1689,1698,1707,1716,1725,1733,1742,1752,1761,1770,1779,1788,1798,1807,1815,1824,1833,1842,1851,1860,1868,1877,1886,1895,1904,1913,1921,1930,1938,1947,1956,1965,1974,1983,1991,2000,2009,2018,2027,2036,2045,2054,2063,2071,2080,2089,2098,2106,2115,2124,2133,2142],{"id":266,"slug":267,"identity":268,"label":269,"aiRelevant":89,"provider":82,"advisoryCount":270,"licenseExpressions":271,"versions":273,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":275},"package:pypi:litellm","litellm-e00b5c8b","pypi:litellm","LiteLLM",12,[272],"MIT",[274],"1.67.4.dev1",[257],{"id":70,"slug":71,"identity":277,"label":72,"aiRelevant":89,"provider":278,"advisoryCount":37,"licenseExpressions":279,"versions":281,"dossier":89,"occurrenceCount":116,"directOccurrenceCount":32,"evidenceFiles":284},"pypi:openai",{"id":247,"label":248},[280],"Apache-2.0",[282,283],"1.81.0","1.91.0",[252,55],{"id":286,"slug":287,"identity":288,"label":289,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":290,"versions":292,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":294},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[291],"non-standard",[293],"0.21.0",[55],{"id":296,"slug":297,"identity":298,"label":299,"aiRelevant":89,"provider":82,"advisoryCount":37,"licenseExpressions":300,"versions":301,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":303},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[291],[302],"0.7.0",[55],{"id":305,"slug":306,"identity":307,"label":308,"aiRelevant":45,"provider":82,"advisoryCount":309,"licenseExpressions":310,"versions":312,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":314},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",33,[280,311],"Apache-2.0 AND MIT",[313],"3.10.11",[55],{"id":316,"slug":317,"identity":318,"label":319,"aiRelevant":45,"provider":82,"advisoryCount":320,"licenseExpressions":321,"versions":323,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":325},"package:pypi:cryptography","cryptography-de36c9c8","pypi:cryptography","cryptography",9,[322],"Apache-2.0 OR BSD-3-Clause",[324],"43.0.3",[55],{"id":327,"slug":328,"identity":329,"label":330,"aiRelevant":45,"provider":82,"advisoryCount":331,"licenseExpressions":332,"versions":333,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":335},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",8,[280],[334],"0.0.18",[55],{"id":337,"slug":338,"identity":339,"label":340,"aiRelevant":45,"provider":82,"advisoryCount":331,"licenseExpressions":341,"versions":343,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":345},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[342],"BSD-3-Clause",[344],"0.44.0",[55],{"id":347,"slug":348,"identity":349,"label":350,"aiRelevant":45,"provider":82,"advisoryCount":351,"licenseExpressions":352,"versions":353,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":355},"package:pypi:pyjwt","pyjwt-b1ea166e","pypi:pyjwt","pyjwt",7,[272],[354],"2.9.0",[55],{"id":357,"slug":358,"identity":359,"label":360,"aiRelevant":45,"provider":82,"advisoryCount":351,"licenseExpressions":361,"versions":362,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":364},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[272],[363],"2.2.3",[55],{"id":366,"slug":367,"identity":368,"label":369,"aiRelevant":45,"provider":82,"advisoryCount":370,"licenseExpressions":371,"versions":373,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":375},"package:pypi:pyasn1","pyasn1-348780fa","pypi:pyasn1","pyasn1",5,[372],"BSD-2-Clause",[374],"0.6.1",[55],{"id":377,"slug":378,"identity":379,"label":380,"aiRelevant":45,"provider":82,"advisoryCount":34,"licenseExpressions":381,"versions":382,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":384},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[342,291],[383],"3.1.6",[55],{"id":386,"slug":387,"identity":388,"label":389,"aiRelevant":45,"provider":82,"advisoryCount":390,"licenseExpressions":391,"versions":392,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":394},"package:pypi:black","black-af583dd9","pypi:black","black",3,[272],[393],"23.12.1",[55],{"id":396,"slug":397,"identity":398,"label":399,"aiRelevant":45,"provider":82,"advisoryCount":390,"licenseExpressions":400,"versions":401,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":403},"package:pypi:mcp","mcp-ef053766","pypi:mcp","mcp",[272],[402],"1.10.0",[55],{"id":405,"slug":406,"identity":407,"label":408,"aiRelevant":45,"provider":82,"advisoryCount":390,"licenseExpressions":409,"versions":410,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":412},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[280],[411],"2.31.0",[55],{"id":414,"slug":415,"identity":416,"label":417,"aiRelevant":45,"provider":82,"advisoryCount":116,"licenseExpressions":418,"versions":420,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":422},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[272,419],"Unlicense",[421],"3.16.1",[55],{"id":424,"slug":425,"identity":426,"label":427,"aiRelevant":45,"provider":82,"advisoryCount":116,"licenseExpressions":428,"versions":429,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":431},"package:pypi:h2","h2-d3161986","pypi:h2","h2",[272],[430],"4.1.0",[55],{"id":433,"slug":434,"identity":435,"label":436,"aiRelevant":45,"provider":82,"advisoryCount":116,"licenseExpressions":437,"versions":438,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":440},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[342],[439],"4.25.8",[55],{"id":442,"slug":443,"identity":444,"label":445,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":446,"versions":447,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":449},"package:pypi:azure-core","azure-core-999f329c","pypi:azure-core","azure-core",[272],[448],"1.33.0",[55],{"id":451,"slug":452,"identity":453,"label":454,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":455,"versions":457,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":459},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[456],"MPL-2.0",[458],"2025.6.15",[55],{"id":461,"slug":462,"identity":463,"label":464,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":465,"versions":466,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":468},"package:pypi:click","click-ef97f731","pypi:click","click",[342,291],[467],"8.1.8",[55],{"id":470,"slug":471,"identity":472,"label":473,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":474,"versions":475,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":477},"package:pypi:diskcache","diskcache-a019f193","pypi:diskcache","diskcache",[280],[476],"5.6.3",[55],{"id":479,"slug":480,"identity":481,"label":482,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":483,"versions":484,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":486},"package:pypi:fastapi-sso","fastapi-sso-0ed97bae","pypi:fastapi-sso","fastapi-sso",[272],[485],"0.16.0",[55],{"id":488,"slug":489,"identity":490,"label":491,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":492,"versions":493,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":494},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[272],[485],[55],{"id":496,"slug":497,"identity":498,"label":499,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":500,"versions":501,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":503},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[342,291],[502],"3.10",[55],{"id":505,"slug":506,"identity":507,"label":508,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":509,"versions":512,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":514},"package:pypi:orjson","orjson-0293c856","pypi:orjson","orjson",[510,511],"Apache-2.0 OR MIT","MPL-2.0 AND (Apache-2.0 OR MIT)",[513],"3.10.15",[55],{"id":516,"slug":517,"identity":518,"label":519,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":520,"versions":521,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":523},"package:pypi:pydantic-settings","pydantic-settings-d677745f","pypi:pydantic-settings","pydantic-settings",[272],[522],"2.10.1",[55],{"id":525,"slug":526,"identity":527,"label":528,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":529,"versions":530,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":532},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[372],[531],"2.19.2",[55],{"id":534,"slug":535,"identity":536,"label":537,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":538,"versions":539,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":541},"package:pypi:pynacl","pynacl-0a554710","pypi:pynacl","pynacl",[280],[540],"1.5.0",[55],{"id":543,"slug":544,"identity":545,"label":546,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":547,"versions":548,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":550},"package:pypi:pytest","pytest-07c6f86c","pypi:pytest","pytest",[272],[549],"7.4.4",[55],{"id":552,"slug":553,"identity":554,"label":555,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":556,"versions":557,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":559},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[342],[558],"1.0.1",[55],{"id":561,"slug":562,"identity":563,"label":564,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":565,"versions":567,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":569},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[566],"MIT AND MPL-2.0",[568],"4.67.1",[55],{"id":571,"slug":572,"identity":573,"label":574,"aiRelevant":45,"provider":82,"advisoryCount":32,"licenseExpressions":575,"versions":576,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":578},"package:pypi:virtualenv","virtualenv-aeb2a546","pypi:virtualenv","virtualenv",[272],[577],"20.34.0",[55],{"id":580,"slug":581,"identity":582,"label":583,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":584,"versions":585,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":587},"package:npm:@prisma\u002Fdebug","prisma-debug-46f5ca0d","npm:@prisma\u002Fdebug","@prisma\u002Fdebug",[280],[586],"5.17.0",[100],{"id":589,"slug":590,"identity":591,"label":592,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":593,"versions":594,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":595},"package:npm:@prisma\u002Fengines","prisma-engines-bb6e33a6","npm:@prisma\u002Fengines","@prisma\u002Fengines",[280],[586],[100],{"id":597,"slug":598,"identity":599,"label":600,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":601,"versions":602,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":604},"package:npm:@prisma\u002Fengines-version","prisma-engines-version-ae2bddac","npm:@prisma\u002Fengines-version","@prisma\u002Fengines-version",[280],[603],"5.17.0-31.393aa359c9ad4a4bb28630fb5613f9c281cde053",[100],{"id":606,"slug":607,"identity":608,"label":609,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":610,"versions":611,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":612},"package:npm:@prisma\u002Ffetch-engine","prisma-fetch-engine-5f681214","npm:@prisma\u002Ffetch-engine","@prisma\u002Ffetch-engine",[280],[586],[100],{"id":614,"slug":615,"identity":616,"label":617,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":618,"versions":619,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":620},"package:npm:@prisma\u002Fget-platform","prisma-get-platform-42faa1d9","npm:@prisma\u002Fget-platform","@prisma\u002Fget-platform",[280],[586],[100],{"id":622,"slug":623,"identity":624,"label":625,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":626,"versions":627,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":629},"package:npm:@types\u002Fprismjs","types-prismjs-3298ce7a","npm:@types\u002Fprismjs","@types\u002Fprismjs",[272],[628],"1.26.5",[100],{"id":631,"slug":632,"identity":633,"label":634,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":635,"versions":636,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":638},"package:npm:@types\u002Fprop-types","types-prop-types-dc4bb417","npm:@types\u002Fprop-types","@types\u002Fprop-types",[272],[637],"15.7.12",[100],{"id":640,"slug":641,"identity":642,"label":643,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":644,"versions":645,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":647},"package:npm:@types\u002Freact","types-react-1801b994","npm:@types\u002Freact","@types\u002Freact",[272],[646],"18.2.73",[100],{"id":649,"slug":650,"identity":651,"label":652,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":653,"versions":654,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":656},"package:npm:@types\u002Freact-copy-to-clipboard","types-react-copy-to-clipboard-9828f06d","npm:@types\u002Freact-copy-to-clipboard","@types\u002Freact-copy-to-clipboard",[272],[655],"5.0.7",[100],{"id":658,"slug":659,"identity":660,"label":661,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":662,"versions":664,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":666},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[663],"PSF-2.0",[665],"2.4.4",[55],{"id":668,"slug":669,"identity":670,"label":671,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":672,"versions":673,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":675},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[280],[674],"1.3.1",[55],{"id":677,"slug":678,"identity":679,"label":680,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":681,"versions":682,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":684},"package:pypi:alabaster","alabaster-b25f55b1","pypi:alabaster","alabaster",[291],[683],"0.7.13",[55],{"id":686,"slug":687,"identity":688,"label":689,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":690,"versions":691,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":692},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[272],[302],[55],{"id":694,"slug":695,"identity":696,"label":697,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":698,"versions":699,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":701},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[272],[700],"4.5.2",[55],{"id":703,"slug":704,"identity":705,"label":706,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":707,"versions":708,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":710},"package:pypi:apscheduler","apscheduler-d0079a7e","pypi:apscheduler","apscheduler",[272],[709],"3.11.0",[55],{"id":712,"slug":713,"identity":714,"label":715,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":716,"versions":717,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":719},"package:pypi:async-timeout","async-timeout-218334ed","pypi:async-timeout","async-timeout",[280],[718],"5.0.1",[55],{"id":721,"slug":722,"identity":723,"label":724,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":725,"versions":726,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":728},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[272],[727],"25.3.0",[55],{"id":730,"slug":731,"identity":732,"label":733,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":734,"versions":735,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":737},"package:pypi:azure-identity","azure-identity-0ac30fa4","pypi:azure-identity","azure-identity",[272],[736],"1.21.0",[55],{"id":739,"slug":740,"identity":741,"label":742,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":743,"versions":744,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":746},"package:pypi:azure-keyvault-secrets","azure-keyvault-secrets-be0634b3","pypi:azure-keyvault-secrets","azure-keyvault-secrets",[272],[745],"4.9.0",[55],{"id":748,"slug":749,"identity":750,"label":751,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":752,"versions":753,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":755},"package:pypi:babel","babel-c668b0a9","pypi:babel","babel",[342],[754],"2.17.0",[55],{"id":757,"slug":758,"identity":759,"label":760,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":761,"versions":762,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":764},"package:pypi:backoff","backoff-594e7418","pypi:backoff","backoff",[272],[763],"2.2.1",[55],{"id":766,"slug":767,"identity":768,"label":769,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":770,"versions":771,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":773},"package:pypi:boolean-py","boolean-py-d2700117","pypi:boolean-py","boolean-py",[372],[772],"5.0",[55],{"id":775,"slug":776,"identity":777,"label":778,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":779,"versions":780,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":782},"package:pypi:boto3","boto3-91d723f0","pypi:boto3","boto3",[280],[781],"1.34.34",[55],{"id":784,"slug":785,"identity":786,"label":787,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":788,"versions":789,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":791},"package:pypi:botocore","botocore-cd11abb8","pypi:botocore","botocore",[280],[790],"1.34.162",[55],{"id":793,"slug":794,"identity":795,"label":796,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":797,"versions":798,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":800},"package:pypi:cachetools","cachetools-84fe6563","pypi:cachetools","cachetools",[272],[799],"5.5.2",[55],{"id":802,"slug":803,"identity":804,"label":805,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":806,"versions":808,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":810},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[272,807],"MIT-0",[809],"1.17.1",[55],{"id":812,"slug":813,"identity":814,"label":815,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":816,"versions":817,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":819},"package:pypi:cfgv","cfgv-4583061f","pypi:cfgv","cfgv",[272],[818],"3.4.0",[55],{"id":821,"slug":822,"identity":823,"label":824,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":825,"versions":826,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":828},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[272],[827],"3.4.2",[55],{"id":830,"slug":831,"identity":832,"label":833,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":834,"versions":835,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":837},"package:npm:clsx","clsx-302ac87a","npm:clsx","clsx",[272],[836],"2.1.1",[100],{"id":839,"slug":840,"identity":841,"label":842,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":843,"versions":844,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":846},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[291],[845],"0.4.6",[55],{"id":848,"slug":849,"identity":850,"label":851,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":852,"versions":853,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":855},"package:pypi:coloredlogs","coloredlogs-941daca5","pypi:coloredlogs","coloredlogs",[272],[854],"15.0.1",[55],{"id":857,"slug":858,"identity":859,"label":860,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":861,"versions":862,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":864},"package:npm:copy-to-clipboard","copy-to-clipboard-eca313cd","npm:copy-to-clipboard","copy-to-clipboard",[272],[863],"3.3.3",[100],{"id":866,"slug":867,"identity":868,"label":869,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":870,"versions":871,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":873},"package:npm:csstype","csstype-64cd134e","npm:csstype","csstype",[272],[872],"3.1.3",[100],{"id":875,"slug":876,"identity":877,"label":878,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":879,"versions":880,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":882},"package:pypi:deprecated","deprecated-e7bb8a9a","pypi:deprecated","deprecated",[272],[881],"1.2.18",[55],{"id":884,"slug":885,"identity":886,"label":887,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":888,"versions":889,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":891},"package:pypi:distlib","distlib-d66be865","pypi:distlib","distlib",[663],[890],"0.4.0",[55],{"id":893,"slug":894,"identity":895,"label":896,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":897,"versions":898,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":900},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[280],[899],"1.9.0",[55],{"id":902,"slug":903,"identity":904,"label":905,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":906,"versions":908,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":910},"package:pypi:dnspython","dnspython-33533784","pypi:dnspython","dnspython",[907],"ISC",[909],"2.6.1",[55],{"id":912,"slug":913,"identity":914,"label":915,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":916,"versions":917,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":919},"package:pypi:docutils","docutils-cc2f8622","pypi:docutils","docutils",[291],[918],"0.20.1",[55],{"id":921,"slug":922,"identity":923,"label":924,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":925,"versions":926,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":928},"package:pypi:email-validator","email-validator-b33c8543","pypi:email-validator","email-validator",[419],[927],"2.2.0",[55],{"id":930,"slug":931,"identity":932,"label":933,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":934,"versions":935,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":937},"package:pypi:exceptiongroup","exceptiongroup-316db5d9","pypi:exceptiongroup","exceptiongroup",[272],[936],"1.3.0",[55],{"id":939,"slug":940,"identity":941,"label":942,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":943,"versions":944,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":946},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[272],[945],"0.115.13",[55],{"id":948,"slug":949,"identity":950,"label":951,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":952,"versions":953,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":955},"package:pypi:flake8","flake8-03083a13","pypi:flake8","flake8",[272],[954],"6.1.0",[55],{"id":957,"slug":958,"identity":959,"label":960,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":961,"versions":962,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":963},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[280],[540],[55],{"id":965,"slug":966,"identity":967,"label":968,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":969,"versions":970,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":972},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[342,291],[971],"2025.3.0",[55],{"id":974,"slug":975,"identity":976,"label":977,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":978,"versions":979,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":981},"package:pypi:google-api-core","google-api-core-1f2bc06d","pypi:google-api-core","google-api-core",[280],[980],"2.25.1",[55],{"id":983,"slug":984,"identity":985,"label":986,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":987,"versions":988,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":990},"package:pypi:google-auth","google-auth-42cfc01f","pypi:google-auth","google-auth",[280],[989],"2.40.3",[55],{"id":992,"slug":993,"identity":994,"label":995,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":996,"versions":997,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":999},"package:pypi:google-cloud-kms","google-cloud-kms-13da5bb2","pypi:google-cloud-kms","google-cloud-kms",[280],[998],"2.24.2",[55],{"id":1001,"slug":1002,"identity":1003,"label":1004,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1005,"versions":1006,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1008},"package:pypi:googleapis-common-protos","googleapis-common-protos-d5ca3481","pypi:googleapis-common-protos","googleapis-common-protos",[280],[1007],"1.70.0",[55],{"id":1010,"slug":1011,"identity":1012,"label":1013,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1014,"versions":1015,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1017},"package:pypi:grpc-google-iam-v1","grpc-google-iam-v1-7496427a","pypi:grpc-google-iam-v1","grpc-google-iam-v1",[280],[1016],"0.14.2",[55],{"id":1019,"slug":1020,"identity":1021,"label":1022,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1023,"versions":1024,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1025},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[280],[1007],[55],{"id":1027,"slug":1028,"identity":1029,"label":1030,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1031,"versions":1032,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1034},"package:pypi:grpcio-status","grpcio-status-f4c90de4","pypi:grpcio-status","grpcio-status",[280],[1033],"1.62.3",[55],{"id":1036,"slug":1037,"identity":1038,"label":1039,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1040,"versions":1041,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1043},"package:pypi:gunicorn","gunicorn-a765d3c5","pypi:gunicorn","gunicorn",[272],[1042],"23.0.0",[55],{"id":1045,"slug":1046,"identity":1047,"label":1048,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1049,"versions":1050,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1052},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[280],[1051],"1.1.5",[55],{"id":1054,"slug":1055,"identity":1056,"label":1057,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1058,"versions":1059,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1061},"package:pypi:hpack","hpack-ae99dcfa","pypi:hpack","hpack",[272],[1060],"4.0.0",[55],{"id":1063,"slug":1064,"identity":1065,"label":1066,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1067,"versions":1068,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1070},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[342],[1069],"1.0.9",[55],{"id":1072,"slug":1073,"identity":1074,"label":1075,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1076,"versions":1077,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1079},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[342],[1078],"0.28.1",[55],{"id":1081,"slug":1082,"identity":1083,"label":1084,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1085,"versions":1086,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1088},"package:pypi:httpx-sse","httpx-sse-0029fe64","pypi:httpx-sse","httpx-sse",[272],[1087],"0.4.1",[55],{"id":1090,"slug":1091,"identity":1092,"label":1093,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1094,"versions":1095,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1097},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[280,291],[1096],"0.33.1",[55],{"id":1099,"slug":1100,"identity":1101,"label":1102,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1103,"versions":1104,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1106},"package:pypi:humanfriendly","humanfriendly-8694dbe5","pypi:humanfriendly","humanfriendly",[272],[1105],"10.0",[55],{"id":1108,"slug":1109,"identity":1110,"label":1111,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1112,"versions":1113,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1115},"package:pypi:hypercorn","hypercorn-1b04018c","pypi:hypercorn","hypercorn",[272],[1114],"0.15.0",[55],{"id":1117,"slug":1118,"identity":1119,"label":1120,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1121,"versions":1122,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1124},"package:pypi:hyperframe","hyperframe-e8ff0952","pypi:hyperframe","hyperframe",[272],[1123],"6.0.1",[55],{"id":1126,"slug":1127,"identity":1128,"label":1129,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1130,"versions":1131,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1133},"package:pypi:identify","identify-bd45ae56","pypi:identify","identify",[272],[1132],"2.6.14",[55],{"id":1135,"slug":1136,"identity":1137,"label":1138,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1139,"versions":1140,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1142},"package:pypi:imagesize","imagesize-6607709a","pypi:imagesize","imagesize",[272],[1141],"1.4.1",[55],{"id":1144,"slug":1145,"identity":1146,"label":1147,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1148,"versions":1149,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1151},"package:pypi:importlib-metadata","importlib-metadata-a3dfda3c","pypi:importlib-metadata","importlib-metadata",[280,291],[1150],"7.1.0",[55],{"id":1153,"slug":1154,"identity":1155,"label":1156,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1157,"versions":1158,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1160},"package:pypi:iniconfig","iniconfig-1f66e358","pypi:iniconfig","iniconfig",[272],[1159],"2.1.0",[55],{"id":1162,"slug":1163,"identity":1164,"label":1165,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1166,"versions":1167,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1169},"package:pypi:isodate","isodate-fdef8b9b","pypi:isodate","isodate",[291],[1168],"0.7.2",[55],{"id":1171,"slug":1172,"identity":1173,"label":1174,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1175,"versions":1176,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1178},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[272],[1177],"0.9.1",[55],{"id":1180,"slug":1181,"identity":1182,"label":1183,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1184,"versions":1185,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1186},"package:pypi:jmespath","jmespath-ffa3386c","pypi:jmespath","jmespath",[272],[558],[55],{"id":1188,"slug":1189,"identity":1190,"label":1191,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1192,"versions":1193,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1194},"package:npm:js-tokens","js-tokens-8b3f06fa","npm:js-tokens","js-tokens",[272],[1060],[100],{"id":1196,"slug":1197,"identity":1198,"label":1199,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1200,"versions":1201,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1203},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[272],[1202],"4.23.0",[55],{"id":1205,"slug":1206,"identity":1207,"label":1208,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1209,"versions":1210,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1212},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[272],[1211],"2023.12.1",[55],{"id":1214,"slug":1215,"identity":1216,"label":1217,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1218,"versions":1219,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1221},"package:pypi:langfuse","langfuse-6ea236ad","pypi:langfuse","langfuse",[272],[1220],"2.54.1",[55],{"id":1223,"slug":1224,"identity":1225,"label":1226,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1227,"versions":1228,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1230},"package:pypi:license-expression","license-expression-66cbb677","pypi:license-expression","license-expression",[280],[1229],"30.4.4",[55],{"id":1232,"slug":1233,"identity":1234,"label":1235,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1236,"versions":1237,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1239},"package:pypi:litellm-proxy-extras","litellm-proxy-extras-50c36b93","pypi:litellm-proxy-extras","litellm-proxy-extras",[],[1238],"0.2.10",[55],{"id":1241,"slug":1242,"identity":1243,"label":1244,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1245,"versions":1246,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1248},"package:npm:loose-envify","loose-envify-73b7e932","npm:loose-envify","loose-envify",[272],[1247],"1.4.0",[100],{"id":1250,"slug":1251,"identity":1252,"label":1253,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1254,"versions":1255,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1257},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[272],[1256],"3.0.0",[55],{"id":1259,"slug":1260,"identity":1261,"label":1262,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1263,"versions":1264,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1266},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[342,291],[1265],"2.1.5",[55],{"id":1268,"slug":1269,"identity":1270,"label":1271,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1272,"versions":1273,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1274},"package:pypi:mccabe","mccabe-dd4f88ab","pypi:mccabe","mccabe",[291],[302],[55],{"id":1276,"slug":1277,"identity":1278,"label":1279,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1280,"versions":1281,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1283},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[272],[1282],"0.1.2",[55],{"id":1285,"slug":1286,"identity":1287,"label":1288,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1289,"versions":1290,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1291},"package:pypi:ml-dtypes","ml-dtypes-eed9ce80","pypi:ml-dtypes","ml-dtypes",[291],[1087],[55],{"id":1293,"slug":1294,"identity":1295,"label":1296,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1297,"versions":1298,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1300},"package:pypi:msal","msal-b77215ab","pypi:msal","msal",[272],[1299],"1.32.3",[55],{"id":1302,"slug":1303,"identity":1304,"label":1305,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1306,"versions":1307,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1308},"package:pypi:msal-extensions","msal-extensions-cc9087ed","pypi:msal-extensions","msal-extensions",[272],[936],[55],{"id":1310,"slug":1311,"identity":1312,"label":1313,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1314,"versions":1315,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1316},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[280],[954],[55],{"id":1318,"slug":1319,"identity":1320,"label":1321,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1322,"versions":1323,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1325},"package:pypi:mypy","mypy-2008b5d3","pypi:mypy","mypy",[272],[1324],"1.14.1",[55],{"id":1327,"slug":1328,"identity":1329,"label":1330,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1331,"versions":1332,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1334},"package:pypi:mypy-extensions","mypy-extensions-702f6cf3","pypi:mypy-extensions","mypy-extensions",[272],[1333],"1.1.0",[55],{"id":1336,"slug":1337,"identity":1338,"label":1339,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1340,"versions":1341,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1343},"package:pypi:nodeenv","nodeenv-71203cea","pypi:nodeenv","nodeenv",[291],[1342],"1.9.1",[55],{"id":1345,"slug":1346,"identity":1347,"label":1348,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1349,"versions":1351,"dossier":45,"occurrenceCount":116,"directOccurrenceCount":37,"evidenceFiles":1354},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1350,291],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1352,1353],"1.26.4","2.3.1",[55],{"id":1356,"slug":1357,"identity":1358,"label":1359,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1360,"versions":1361,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1363},"package:pypi:numpydoc","numpydoc-33a87f7f","pypi:numpydoc","numpydoc",[291],[1362],"1.7.0",[55],{"id":1365,"slug":1366,"identity":1367,"label":1368,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1369,"versions":1370,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1372},"package:pypi:oauthlib","oauthlib-5d97cdbc","pypi:oauthlib","oauthlib",[342,291],[1371],"3.3.1",[55],{"id":1374,"slug":1375,"identity":1376,"label":1377,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1378,"versions":1379,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1381},"package:npm:object-assign","object-assign-fa9dc3dc","npm:object-assign","object-assign",[272],[1380],"4.1.1",[100],{"id":1383,"slug":1384,"identity":1385,"label":1386,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1387,"versions":1388,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1390},"package:pypi:opentelemetry-api","opentelemetry-api-341bc8f7","pypi:opentelemetry-api","opentelemetry-api",[280],[1389],"1.25.0",[55],{"id":1392,"slug":1393,"identity":1394,"label":1395,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1396,"versions":1397,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1398},"package:pypi:opentelemetry-exporter-otlp","opentelemetry-exporter-otlp-b1d3676e","pypi:opentelemetry-exporter-otlp","opentelemetry-exporter-otlp",[280],[1389],[55],{"id":1400,"slug":1401,"identity":1402,"label":1403,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1404,"versions":1405,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1406},"package:pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common-636ba371","pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common",[280],[1389],[55],{"id":1408,"slug":1409,"identity":1410,"label":1411,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1412,"versions":1413,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1414},"package:pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc-c102a976","pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc",[280],[1389],[55],{"id":1416,"slug":1417,"identity":1418,"label":1419,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1420,"versions":1421,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1422},"package:pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http-6f55af01","pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http",[280],[1389],[55],{"id":1424,"slug":1425,"identity":1426,"label":1427,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1428,"versions":1429,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1430},"package:pypi:opentelemetry-proto","opentelemetry-proto-f15a3372","pypi:opentelemetry-proto","opentelemetry-proto",[280],[1389],[55],{"id":1432,"slug":1433,"identity":1434,"label":1435,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1436,"versions":1437,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1438},"package:pypi:opentelemetry-sdk","opentelemetry-sdk-38b86085","pypi:opentelemetry-sdk","opentelemetry-sdk",[280],[1389],[55],{"id":1440,"slug":1441,"identity":1442,"label":1443,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1444,"versions":1445,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1447},"package:pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions-15f3be17","pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions",[280],[1446],"0.46b0",[55],{"id":1449,"slug":1450,"identity":1451,"label":1452,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1453,"versions":1455,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1457},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[1454,291],"Apache-2.0 OR BSD-2-Clause",[1456],"24.2",[55],{"id":1459,"slug":1460,"identity":1461,"label":1462,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1463,"versions":1464,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1466},"package:pypi:pathspec","pathspec-01378677","pypi:pathspec","pathspec",[456],[1465],"0.12.1",[55],{"id":1468,"slug":1469,"identity":1470,"label":1471,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1472,"versions":1473,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1475},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[272],[1474],"4.3.6",[55],{"id":1477,"slug":1478,"identity":1479,"label":1480,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1481,"versions":1482,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1483},"package:pypi:pluggy","pluggy-24479aaf","pypi:pluggy","pluggy",[272],[540],[55],{"id":1485,"slug":1486,"identity":1487,"label":1488,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1489,"versions":1490,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1492},"package:pypi:pre-commit","pre-commit-6a196b54","pypi:pre-commit","pre-commit",[272],[1491],"4.3.0",[55],{"id":1494,"slug":1495,"identity":1496,"label":1497,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1498,"versions":1499,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1501},"package:pypi:priority","priority-b29644e7","pypi:priority","priority",[272],[1500],"2.0.0",[55],{"id":1503,"slug":1504,"identity":1505,"label":1506,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1507,"versions":1508,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":1510},"package:npm:prism-react-renderer","prism-react-renderer-f04c73c3","npm:prism-react-renderer","prism-react-renderer",[272],[1509],"2.4.1",[100],{"id":1512,"slug":1513,"identity":1514,"label":1515,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1516,"versions":1517,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":1518},"package:npm:prisma","prisma-3de935d4","npm:prisma","prisma",[280],[586],[100],{"id":1520,"slug":1521,"identity":1522,"label":1515,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1523,"versions":1524,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1526},"package:pypi:prisma","prisma-a741995b","pypi:prisma",[291],[1525],"0.11.0",[55],{"id":1528,"slug":1529,"identity":1530,"label":1531,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1532,"versions":1534,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1536},"package:pypi:prometheus-client","prometheus-client-7bd206b5","pypi:prometheus-client","prometheus-client",[280,1533],"Apache-2.0 AND BSD-2-Clause",[1535],"0.20.0",[55],{"id":1538,"slug":1539,"identity":1540,"label":1541,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1542,"versions":1543,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1545},"package:npm:prop-types","prop-types-cbf4f9fe","npm:prop-types","prop-types",[272],[1544],"15.8.1",[100],{"id":1547,"slug":1548,"identity":1549,"label":1550,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1551,"versions":1552,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1554},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[280],[1553],"0.2.0",[55],{"id":1556,"slug":1557,"identity":1558,"label":1559,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1560,"versions":1561,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1563},"package:pypi:proto-plus","proto-plus-41237fa1","pypi:proto-plus","proto-plus",[280],[1562],"1.26.1",[55],{"id":1565,"slug":1566,"identity":1567,"label":1568,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1569,"versions":1570,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1572},"package:pypi:pyasn1-modules","pyasn1-modules-6a7471e8","pypi:pyasn1-modules","pyasn1-modules",[291],[1571],"0.4.2",[55],{"id":1574,"slug":1575,"identity":1576,"label":1577,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1578,"versions":1579,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1581},"package:pypi:pycodestyle","pycodestyle-2b26445c","pypi:pycodestyle","pycodestyle",[272],[1580],"2.11.1",[55],{"id":1583,"slug":1584,"identity":1585,"label":1586,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1587,"versions":1588,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1590},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[342],[1589],"2.22",[55],{"id":1592,"slug":1593,"identity":1594,"label":1595,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1596,"versions":1597,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1599},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[272],[1598],"2.10.6",[55],{"id":1601,"slug":1602,"identity":1603,"label":1604,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1605,"versions":1606,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1608},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[272],[1607],"2.27.2",[55],{"id":1610,"slug":1611,"identity":1612,"label":1613,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1614,"versions":1615,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1617},"package:pypi:pyflakes","pyflakes-9bd8cac4","pypi:pyflakes","pyflakes",[272],[1616],"3.1.0",[55],{"id":1619,"slug":1620,"identity":1621,"label":1622,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1623,"versions":1624,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1626},"package:pypi:pyreadline3","pyreadline3-e43706a5","pypi:pyreadline3","pyreadline3",[291],[1625],"3.5.4",[55],{"id":1628,"slug":1629,"identity":1630,"label":1631,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1632,"versions":1633,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1635},"package:pypi:pytest-asyncio","pytest-asyncio-5e711c5a","pypi:pytest-asyncio","pytest-asyncio",[280],[1634],"0.21.2",[55],{"id":1637,"slug":1638,"identity":1639,"label":1640,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1641,"versions":1642,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1644},"package:pypi:pytest-mock","pytest-mock-525732b9","pypi:pytest-mock","pytest-mock",[272],[1643],"3.14.1",[55],{"id":1646,"slug":1647,"identity":1648,"label":1649,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1650,"versions":1651,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1653},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[291],[1652],"2.9.0.post0",[55],{"id":1655,"slug":1656,"identity":1657,"label":1658,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1659,"versions":1661,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1662},"package:pypi:python-debian","python-debian-dcb8fb7e","pypi:python-debian","python-debian",[1660],"GPL-2.0-or-later",[558],[55],{"id":1664,"slug":1665,"identity":1666,"label":1667,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1668,"versions":1669,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1671},"package:pypi:python-magic","python-magic-28c4094a","pypi:python-magic","python-magic",[272],[1670],"0.4.27",[55],{"id":1673,"slug":1674,"identity":1675,"label":1676,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1677,"versions":1678,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1679},"package:pypi:python-ulid","python-ulid-231b1920","pypi:python-ulid","python-ulid",[272],[1256],[55],{"id":1681,"slug":1682,"identity":1683,"label":1684,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1685,"versions":1686,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1688},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[272],[1687],"6.0.2",[55],{"id":1690,"slug":1691,"identity":1692,"label":1693,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1694,"versions":1695,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1697},"package:npm:react","react-29607ded","npm:react","react",[272],[1696],"18.2.0",[100],{"id":1699,"slug":1700,"identity":1701,"label":1702,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1703,"versions":1704,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":32,"evidenceFiles":1706},"package:npm:react-copy-to-clipboard","react-copy-to-clipboard-d83acd9d","npm:react-copy-to-clipboard","react-copy-to-clipboard",[272],[1705],"5.1.0",[100],{"id":1708,"slug":1709,"identity":1710,"label":1711,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1712,"versions":1713,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1715},"package:npm:react-is","react-is-d95e9978","npm:react-is","react-is",[272],[1714],"16.13.1",[100],{"id":1717,"slug":1718,"identity":1719,"label":1720,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1721,"versions":1722,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1724},"package:pypi:redis","redis-94bd1499","pypi:redis","redis",[272],[1723],"5.3.0",[55],{"id":1726,"slug":1727,"identity":1728,"label":1729,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1730,"versions":1731,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1732},"package:pypi:redisvl","redisvl-24e4f31a","pypi:redisvl","redisvl",[272],[1087],[55],{"id":1734,"slug":1735,"identity":1736,"label":1737,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1738,"versions":1739,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1741},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[272],[1740],"0.35.1",[55],{"id":1743,"slug":1744,"identity":1745,"label":1746,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1747,"versions":1749,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1751},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[1748,291],"Apache-2.0 AND CNRI-Python",[1750],"2024.11.6",[55],{"id":1753,"slug":1754,"identity":1755,"label":1756,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1757,"versions":1758,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1760},"package:pypi:requests-mock","requests-mock-f997e834","pypi:requests-mock","requests-mock",[280],[1759],"1.12.1",[55],{"id":1762,"slug":1763,"identity":1764,"label":1765,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1766,"versions":1767,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1769},"package:pypi:resend","resend-75739286","pypi:resend","resend",[272],[1768],"0.8.0",[55],{"id":1771,"slug":1772,"identity":1773,"label":1774,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1775,"versions":1776,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1778},"package:pypi:responses","responses-15db8564","pypi:responses","responses",[280],[1777],"0.25.7",[55],{"id":1780,"slug":1781,"identity":1782,"label":1783,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1784,"versions":1785,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1787},"package:pypi:respx","respx-6e4b8195","pypi:respx","respx",[342],[1786],"0.22.0",[55],{"id":1789,"slug":1790,"identity":1791,"label":1792,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1793,"versions":1795,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1797},"package:pypi:reuse","reuse-a5ec460b","pypi:reuse","reuse",[1794],"Apache-2.0 AND CC-BY-SA-4.0 AND CC0-1.0 AND GPL-3.0-or-later",[1796],"6.2.0",[55],{"id":1799,"slug":1800,"identity":1801,"label":1802,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1803,"versions":1804,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1806},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[272],[1805],"13.7.1",[55],{"id":1808,"slug":1809,"identity":1810,"label":1811,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1812,"versions":1813,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1814},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[272],[918],[55],{"id":1816,"slug":1817,"identity":1818,"label":1819,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1820,"versions":1821,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1823},"package:pypi:rq","rq-30f38331","pypi:rq","rq",[372],[1822],"2.3.3",[55],{"id":1825,"slug":1826,"identity":1827,"label":1828,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1829,"versions":1830,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1832},"package:pypi:rsa","rsa-1037e3e0","pypi:rsa","rsa",[280],[1831],"4.9.1",[55],{"id":1834,"slug":1835,"identity":1836,"label":1837,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1838,"versions":1839,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1841},"package:pypi:ruff","ruff-d5943bdf","pypi:ruff","ruff",[272],[1840],"0.1.15",[55],{"id":1843,"slug":1844,"identity":1845,"label":1846,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1847,"versions":1848,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1850},"package:pypi:s3transfer","s3transfer-34b3ad07","pypi:s3transfer","s3transfer",[280],[1849],"0.10.4",[55],{"id":1852,"slug":1853,"identity":1854,"label":1855,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1856,"versions":1857,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1859},"package:pypi:six","six-3c3888bd","pypi:six","six",[272],[1858],"1.17.0",[55],{"id":1861,"slug":1862,"identity":1863,"label":1864,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1865,"versions":1866,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1867},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[510],[674],[55],{"id":1869,"slug":1870,"identity":1871,"label":1872,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1873,"versions":1874,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1876},"package:pypi:snowballstemmer","snowballstemmer-1fdc23ac","pypi:snowballstemmer","snowballstemmer",[342],[1875],"3.0.1",[55],{"id":1878,"slug":1879,"identity":1880,"label":1881,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1882,"versions":1883,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1885},"package:pypi:sphinx","sphinx-e280a19f","pypi:sphinx","sphinx",[291],[1884],"7.1.2",[55],{"id":1887,"slug":1888,"identity":1889,"label":1890,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1891,"versions":1892,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1894},"package:pypi:sphinxcontrib-applehelp","sphinxcontrib-applehelp-9e21d5db","pypi:sphinxcontrib-applehelp","sphinxcontrib-applehelp",[372,291],[1893],"1.0.4",[55],{"id":1896,"slug":1897,"identity":1898,"label":1899,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1900,"versions":1901,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1903},"package:pypi:sphinxcontrib-devhelp","sphinxcontrib-devhelp-9744cd2e","pypi:sphinxcontrib-devhelp","sphinxcontrib-devhelp",[291],[1902],"1.0.2",[55],{"id":1905,"slug":1906,"identity":1907,"label":1908,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1909,"versions":1910,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1912},"package:pypi:sphinxcontrib-htmlhelp","sphinxcontrib-htmlhelp-07a94a0d","pypi:sphinxcontrib-htmlhelp","sphinxcontrib-htmlhelp",[372,291],[1911],"2.0.1",[55],{"id":1914,"slug":1915,"identity":1916,"label":1917,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1918,"versions":1919,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1920},"package:pypi:sphinxcontrib-jsmath","sphinxcontrib-jsmath-c5efc784","pypi:sphinxcontrib-jsmath","sphinxcontrib-jsmath",[291],[558],[55],{"id":1922,"slug":1923,"identity":1924,"label":1925,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1926,"versions":1927,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1929},"package:pypi:sphinxcontrib-qthelp","sphinxcontrib-qthelp-dfa89853","pypi:sphinxcontrib-qthelp","sphinxcontrib-qthelp",[291],[1928],"1.0.3",[55],{"id":1931,"slug":1932,"identity":1933,"label":1934,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1935,"versions":1936,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1937},"package:pypi:sphinxcontrib-serializinghtml","sphinxcontrib-serializinghtml-ef6417f3","pypi:sphinxcontrib-serializinghtml","sphinxcontrib-serializinghtml",[291],[1051],[55],{"id":1939,"slug":1940,"identity":1941,"label":1942,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1943,"versions":1944,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1946},"package:pypi:sse-starlette","sse-starlette-94ef666b","pypi:sse-starlette","sse-starlette",[342],[1945],"2.1.3",[55],{"id":1948,"slug":1949,"identity":1950,"label":1951,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1952,"versions":1953,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1955},"package:pypi:tabulate","tabulate-f0392898","pypi:tabulate","tabulate",[272],[1954],"0.9.0",[55],{"id":1957,"slug":1958,"identity":1959,"label":1960,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1961,"versions":1962,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1964},"package:pypi:taskgroup","taskgroup-926bd6e4","pypi:taskgroup","taskgroup",[272],[1963],"0.2.2",[55],{"id":1966,"slug":1967,"identity":1968,"label":1969,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1970,"versions":1971,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1973},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[280],[1972],"9.1.2",[55],{"id":1975,"slug":1976,"identity":1977,"label":1978,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1979,"versions":1980,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1982},"package:npm:toggle-selection","toggle-selection-329c2f65","npm:toggle-selection","toggle-selection",[272],[1981],"1.0.6",[100],{"id":1984,"slug":1985,"identity":1986,"label":1987,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1988,"versions":1989,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1990},"package:pypi:tomli","tomli-e09082bd","pypi:tomli","tomli",[272],[763],[55],{"id":1992,"slug":1993,"identity":1994,"label":1995,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":1996,"versions":1997,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1999},"package:pypi:tomlkit","tomlkit-d5fa3fad","pypi:tomlkit","tomlkit",[272],[1998],"0.13.3",[55],{"id":2001,"slug":2002,"identity":2003,"label":2004,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2005,"versions":2006,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2008},"package:pypi:types-cffi","types-cffi-ceae0d4f","pypi:types-cffi","types-cffi",[280],[2007],"1.16.0.20241221",[55],{"id":2010,"slug":2011,"identity":2012,"label":2013,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2014,"versions":2015,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2017},"package:pypi:types-pyopenssl","types-pyopenssl-ff7ab3d8","pypi:types-pyopenssl","types-pyopenssl",[280],[2016],"24.1.0.20240722",[55],{"id":2019,"slug":2020,"identity":2021,"label":2022,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2023,"versions":2024,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2026},"package:pypi:types-pyyaml","types-pyyaml-2289c6a6","pypi:types-pyyaml","types-pyyaml",[280],[2025],"6.0.12.20241230",[55],{"id":2028,"slug":2029,"identity":2030,"label":2031,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2032,"versions":2033,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2035},"package:pypi:types-redis","types-redis-c3df1280","pypi:types-redis","types-redis",[280],[2034],"4.6.0.20241004",[55],{"id":2037,"slug":2038,"identity":2039,"label":2040,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2041,"versions":2042,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2044},"package:pypi:types-requests","types-requests-1c349d80","pypi:types-requests","types-requests",[280],[2043],"2.32.0.20241016",[55],{"id":2046,"slug":2047,"identity":2048,"label":2049,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2050,"versions":2051,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2053},"package:pypi:types-setuptools","types-setuptools-911215f6","pypi:types-setuptools","types-setuptools",[280],[2052],"75.8.0.20250110",[55],{"id":2055,"slug":2056,"identity":2057,"label":2058,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2059,"versions":2060,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2062},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[663,291],[2061],"4.13.2",[55],{"id":2064,"slug":2065,"identity":2066,"label":2067,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2068,"versions":2069,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2070},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[272],[1087],[55],{"id":2072,"slug":2073,"identity":2074,"label":2075,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2076,"versions":2077,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2079},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[280],[2078],"2025.2",[55],{"id":2081,"slug":2082,"identity":2083,"label":2084,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2085,"versions":2086,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2088},"package:pypi:tzlocal","tzlocal-7dbb909c","pypi:tzlocal","tzlocal",[272],[2087],"5.2",[55],{"id":2090,"slug":2091,"identity":2092,"label":2093,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2094,"versions":2095,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2097},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[342],[2096],"0.29.0",[55],{"id":2099,"slug":2100,"identity":2101,"label":2102,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2103,"versions":2104,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2105},"package:pypi:uvloop","uvloop-7921eb0f","pypi:uvloop","uvloop",[272],[293],[55],{"id":2107,"slug":2108,"identity":2109,"label":2110,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2111,"versions":2112,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2114},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[342],[2113],"13.1",[55],{"id":2116,"slug":2117,"identity":2118,"label":2119,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2120,"versions":2121,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2123},"package:pypi:wrapt","wrapt-505c01f2","pypi:wrapt","wrapt",[291],[2122],"1.17.2",[55],{"id":2125,"slug":2126,"identity":2127,"label":2128,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2129,"versions":2130,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2132},"package:pypi:wsproto","wsproto-d5a3a1f2","pypi:wsproto","wsproto",[272],[2131],"1.2.0",[55],{"id":2134,"slug":2135,"identity":2136,"label":2137,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2138,"versions":2139,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2141},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[280],[2140],"1.15.2",[55],{"id":2143,"slug":2144,"identity":2145,"label":2146,"aiRelevant":45,"provider":82,"advisoryCount":37,"licenseExpressions":2147,"versions":2148,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2150},"package:pypi:zipp","zipp-75ac1ddb","pypi:zipp","zipp",[272],[2149],"3.20.2",[55],[2152,2191,2224,2255,2280,2312,2338,2361,2387,2407,2439,2457,2475,2509,2549,2572,2594,2619,2652,2680,2708,2731,2758,2777,2831,2858,2881,2896,2922,2945,2967,2990,3026,3052,3079,3105,3133,3164,3203,3221,3247,3298,3321,3353,3377,3400,3423,3453,3487,3517,3537,3562,3594,3624,3649,3675,3699,3722,3750,3774,3793,3821,3854,3879,3907,3930,3959,3974,4008,4030,4053,4074,4106,4127,4162,4198,4221,4243,4270,4291,4323,4344,4391,4416,4442,4465,4489,4508,4530,4552,4582,4610,4633,4658,4681,4729,4751,4772,4794,4815,4839,4866,4885,4917,4954,5008,5029,5052,5079,5106,5129,5149,5179,5204,5230,5262,5296,5315,5334,5355,5372,5388,5417],{"id":121,"slug":2153,"dossier":45,"summary":2154,"aliases":2155,"sourceIds":2158,"published":2159,"modified":2160,"checkedAt":7,"severity":2161,"references":2165,"versionKeys":2189,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[2156,2157],"CVE-2024-39689","PYSEC-2024-230",[121,2157],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[2162],{"type":2163,"score":2164},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[2166,2169,2171,2174,2177,2180,2183,2185,2187],{"type":2167,"url":2168},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":2167,"url":2170},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":2172,"url":2173},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":2175,"url":2176},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":2178,"url":2179},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":2181,"url":2182},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":2178,"url":2184},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":2167,"url":2186},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":2167,"url":2188},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[2190],"pypi:certifi@2024.6.2",{"id":122,"slug":2192,"dossier":45,"summary":2193,"aliases":2194,"sourceIds":2197,"published":2198,"modified":2199,"checkedAt":7,"severity":2200,"references":2203,"versionKeys":2220,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[2195,2196],"CVE-2025-54121","PYSEC-2026-1941",[122,2196],"2025-07-21T19:34:23Z","2026-07-07T17:57:05.760766451Z",[2201],{"type":2163,"score":2202},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2204,2206,2208,2210,2212,2214,2216,2218],{"type":2178,"url":2205},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":2167,"url":2207},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":2172,"url":2209},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":2175,"url":2211},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":2178,"url":2213},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":2178,"url":2215},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":2175,"url":2217},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":2167,"url":2219},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[2221,2222,2223],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":123,"slug":2225,"dossier":45,"summary":2226,"aliases":2227,"sourceIds":2230,"published":2231,"modified":2232,"checkedAt":7,"severity":2233,"references":2239,"versionKeys":2246,"packageCount":32,"repositoryCount":320},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[2228,2229],"CVE-2026-54279","PYSEC-2026-2112",[123,2229],"2026-06-15T20:08:51Z","2026-07-13T07:26:35.059071977Z",[2234,2237],{"type":2235,"score":2236},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":2163,"score":2238},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2240,2242,2244],{"type":2167,"url":2241},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":2175,"url":2243},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":2172,"url":2245},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[2247,2248,2249,2250,2251,2252,2253,2254],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3",{"id":124,"slug":2256,"dossier":45,"summary":2257,"aliases":2258,"sourceIds":2261,"published":2262,"modified":2263,"checkedAt":7,"severity":2264,"references":2269,"versionKeys":2279,"packageCount":32,"repositoryCount":320},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[2259,2260],"CVE-2026-34514","PYSEC-2026-2096",[124,2260],"2026-04-01T21:16:59.417Z","2026-07-13T07:26:28.471600737Z",[2265,2267],{"type":2235,"score":2266},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2163,"score":2268},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2270,2272,2274,2276,2277],{"type":2172,"url":2271},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":2167,"url":2273},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":2172,"url":2275},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":2175,"url":2243},{"type":2167,"url":2278},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[2247,2248,2249,2250,2251,2252,2253,2254],{"id":125,"slug":2281,"dossier":89,"summary":2282,"aliases":2283,"sourceIds":2286,"published":2287,"modified":2288,"checkedAt":7,"severity":2289,"references":2292,"versionKeys":2305,"packageCount":32,"repositoryCount":2311},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[2284,2285],"CVE-2025-66471","PYSEC-2026-1994",[125,2285],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[2290],{"type":2235,"score":2291},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[2293,2295,2297,2299,2301,2303],{"type":2178,"url":2294},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":2167,"url":2296},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":2172,"url":2298},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":2175,"url":2300},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":2175,"url":2302},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":2167,"url":2304},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[2306,2307,2308,2309,2310],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":126,"slug":2313,"dossier":89,"summary":2314,"aliases":2315,"sourceIds":2318,"published":2319,"modified":2320,"checkedAt":7,"severity":2321,"references":2324,"versionKeys":2337,"packageCount":32,"repositoryCount":2311},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[2316,2317],"CVE-2026-21441","PYSEC-2026-1996",[126,2317],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[2322,2323],{"type":2163,"score":2238},{"type":2235,"score":2291},[2325,2327,2329,2331,2332,2334,2335],{"type":2178,"url":2326},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":2167,"url":2328},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":2172,"url":2330},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":2175,"url":2300},{"type":2178,"url":2333},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":2175,"url":2302},{"type":2167,"url":2336},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[2306,2307,2308,2309,2310],{"id":127,"slug":2339,"dossier":45,"summary":2340,"aliases":2341,"sourceIds":2344,"published":2345,"modified":2346,"checkedAt":7,"severity":2347,"references":2351,"versionKeys":2360,"packageCount":32,"repositoryCount":320},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[2342,2343],"CVE-2026-34517","PYSEC-2026-2099",[127,2343],"2026-04-01T21:16:59.870Z","2026-07-13T07:26:13.561233517Z",[2348,2350],{"type":2235,"score":2349},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2163,"score":2202},[2352,2354,2356,2358,2359],{"type":2172,"url":2353},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":2167,"url":2355},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":2172,"url":2357},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":2175,"url":2243},{"type":2167,"url":2278},[2247,2248,2249,2250,2251,2252,2253,2254],{"id":128,"slug":2362,"dossier":45,"summary":2363,"aliases":2364,"sourceIds":2367,"published":2368,"modified":2369,"checkedAt":7,"severity":2370,"references":2373,"versionKeys":2386,"packageCount":32,"repositoryCount":351},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[2365,2366],"CVE-2025-50182","PYSEC-2026-1997",[128,2366],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[2371],{"type":2163,"score":2372},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2374,2376,2378,2380,2381,2383,2384],{"type":2178,"url":2375},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":2167,"url":2377},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":2172,"url":2379},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":2175,"url":2300},{"type":2178,"url":2382},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":2175,"url":2302},{"type":2167,"url":2385},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[2306,2307,2308,2309],{"id":129,"slug":2388,"dossier":45,"summary":2389,"aliases":2390,"sourceIds":2393,"published":2394,"modified":2395,"checkedAt":7,"severity":2396,"references":2400,"versionKeys":2406,"packageCount":32,"repositoryCount":320},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[2391,2392],"CVE-2026-54273","PYSEC-2026-2107",[129,2392],"2026-06-15T20:10:32Z","2026-07-13T07:26:17.316378610Z",[2397,2399],{"type":2235,"score":2398},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2163,"score":2238},[2401,2403,2405],{"type":2167,"url":2402},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":2172,"url":2404},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":2175,"url":2243},[2247,2248,2249,2250,2251,2252,2253,2254],{"id":130,"slug":2408,"dossier":45,"summary":2409,"aliases":2410,"sourceIds":2413,"published":2414,"modified":2415,"checkedAt":7,"severity":2416,"references":2419,"versionKeys":2434,"packageCount":32,"repositoryCount":34},"ghsa-4g5m-c9r5-49xf-40cc28b0","LiteLLM: Local file read via request-supplied OIDC file references",[2411,2412],"CVE-2026-59819","PYSEC-2026-3476",[130,2412],"2026-07-22T22:38:04Z","2026-07-23T15:11:50.258485894Z",[2417],{"type":2235,"score":2418},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:H\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2420,2422,2424,2426,2428,2430,2432],{"type":2178,"url":2421},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-4g5m-c9r5-49xf",{"type":2167,"url":2423},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59819",{"type":2178,"url":2425},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fpull\u002F25592",{"type":2175,"url":2427},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm",{"type":2178,"url":2429},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.83.10-stable",{"type":2175,"url":2431},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flitellm",{"type":2167,"url":2433},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4g5m-c9r5-49xf",[2435,2436,2437,2438],"pypi:litellm@1.53.7","pypi:litellm@1.67.4.dev1","pypi:litellm@1.68.0","pypi:litellm@1.73.6.post1",{"id":131,"slug":2440,"dossier":45,"summary":2441,"aliases":2442,"sourceIds":2445,"published":2446,"modified":2447,"checkedAt":7,"severity":2448,"references":2452,"versionKeys":2456,"packageCount":32,"repositoryCount":320},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[2443,2444],"CVE-2026-54275","PYSEC-2026-237",[131,2444],"2026-06-15T20:11:13Z","2026-06-27T11:26:29.646102490Z",[2449,2451],{"type":2235,"score":2450},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2163,"score":2238},[2453,2455],{"type":2167,"url":2454},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":2175,"url":2243},[2247,2248,2249,2250,2251,2252,2253,2254],{"id":132,"slug":2458,"dossier":45,"summary":2459,"aliases":2460,"sourceIds":2462,"published":2463,"modified":2464,"checkedAt":7,"severity":2465,"references":2468,"versionKeys":2473,"packageCount":32,"repositoryCount":116},"ghsa-4xgf-cpjx-pc3j-c1284f87","pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size",[2461],"CVE-2026-58203",[132],"2026-06-19T22:10:42Z","2026-07-08T08:12:48.604645024Z",[2466],{"type":2163,"score":2467},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[2469,2471],{"type":2178,"url":2470},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings\u002Fsecurity\u002Fadvisories\u002FGHSA-4xgf-cpjx-pc3j",{"type":2175,"url":2472},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings",[2474],"pypi:pydantic-settings@2.12.0",{"id":133,"slug":2476,"dossier":45,"summary":2477,"aliases":2478,"sourceIds":2481,"published":2482,"modified":2483,"checkedAt":7,"severity":2484,"references":2489,"versionKeys":2508,"packageCount":32,"repositoryCount":34},"ghsa-4xpc-pv4p-pm3w-c72dbf83","LiteLLM: Authentication Bypass via Host Header Injection",[2479,2480],"CVE-2026-49468","PYSEC-2026-388",[133,2480],"2026-06-16T23:38:26Z","2026-07-18T17:30:30.617013067Z",[2485,2487],{"type":2163,"score":2486},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2235,"score":2488},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[2490,2492,2494,2496,2498,2499,2501,2503,2505,2506],{"type":2178,"url":2491},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-4xpc-pv4p-pm3w",{"type":2167,"url":2493},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49468",{"type":2178,"url":2495},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-49468",{"type":2178,"url":2497},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491520",{"type":2175,"url":2427},{"type":2178,"url":2500},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.84.0",{"type":2167,"url":2502},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xpc-pv4p-pm3w",{"type":2178,"url":2504},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flitellm\u002FPYSEC-2026-388.yaml",{"type":2175,"url":2431},{"type":2178,"url":2507},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-49468.json",[2435,2436,2437,2438],{"id":134,"slug":2510,"dossier":89,"summary":2511,"aliases":2512,"sourceIds":2515,"published":2516,"modified":2517,"checkedAt":7,"severity":2518,"references":2523,"versionKeys":2546,"packageCount":32,"repositoryCount":2311},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[2513,2514],"CVE-2026-4539","PYSEC-2026-2987",[134,2514],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[2519,2521],{"type":2163,"score":2520},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":2235,"score":2522},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[2524,2526,2528,2530,2532,2534,2536,2538,2540,2542,2544],{"type":2167,"url":2525},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":2178,"url":2527},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":2178,"url":2529},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":2178,"url":2531},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":2175,"url":2533},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":2178,"url":2535},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":2178,"url":2537},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":2178,"url":2539},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":2178,"url":2541},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":2175,"url":2543},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":2167,"url":2545},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[2547,2548],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":135,"slug":2550,"dossier":45,"summary":2551,"aliases":2552,"sourceIds":2553,"published":2554,"modified":2555,"checkedAt":7,"severity":2556,"references":2558,"versionKeys":2565,"packageCount":32,"repositoryCount":351},"ghsa-537c-gmf6-5ccf-23a24e16","Vulnerable OpenSSL included in cryptography wheels",[],[135],"2026-06-15T20:12:27Z","2026-06-16T19:59:26.897634900Z",[2557],{"type":2163,"score":2238},[2559,2561,2563],{"type":2178,"url":2560},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-537c-gmf6-5ccf",{"type":2175,"url":2562},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography",{"type":2178,"url":2564},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20260609.txt",[2566,2567,2568,2569,2570,2571],"pypi:cryptography@42.0.8","pypi:cryptography@43.0.3","pypi:cryptography@44.0.0","pypi:cryptography@44.0.3","pypi:cryptography@45.0.7","pypi:cryptography@46.0.3",{"id":136,"slug":2573,"dossier":45,"summary":2574,"aliases":2575,"sourceIds":2578,"published":2579,"modified":2580,"checkedAt":7,"severity":2581,"references":2584,"versionKeys":2593,"packageCount":32,"repositoryCount":34},"ghsa-53mr-6c8q-9789-034179e7","LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint",[2576,2577],"CVE-2026-35029","PYSEC-2026-2597",[136,2577],"2026-04-03T21:59:31Z","2026-07-13T16:43:01.087747831Z",[2582],{"type":2235,"score":2583},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:L\u002FSI:L\u002FSA:N",[2585,2587,2589,2590,2591],{"type":2178,"url":2586},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-53mr-6c8q-9789",{"type":2167,"url":2588},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35029",{"type":2175,"url":2427},{"type":2175,"url":2431},{"type":2167,"url":2592},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-53mr-6c8q-9789",[2435,2436,2437,2438],{"id":137,"slug":2595,"dossier":45,"summary":2596,"aliases":2597,"sourceIds":2600,"published":2601,"modified":2602,"checkedAt":7,"severity":2603,"references":2606,"versionKeys":2618,"packageCount":32,"repositoryCount":351},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[2598,2599],"CVE-2025-69226","PYSEC-2026-1097",[137,2599],"2026-01-05T23:09:51Z","2026-07-07T17:57:12.462419549Z",[2604],{"type":2235,"score":2605},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[2607,2609,2611,2613,2614,2616],{"type":2178,"url":2608},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":2167,"url":2610},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":2172,"url":2612},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":2175,"url":2243},{"type":2175,"url":2615},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":2167,"url":2617},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[2247,2248,2249,2250,2251,2252,2253],{"id":138,"slug":2620,"dossier":45,"summary":2621,"aliases":2622,"sourceIds":2626,"published":2627,"modified":2628,"checkedAt":7,"severity":2629,"references":2632,"versionKeys":2647,"packageCount":32,"repositoryCount":64},"ghsa-597g-3phw-6986-6d75801e","virtualenv Has TOCTOU Vulnerabilities in Directory Creation",[2623,2624,2625],"BIT-virtualenv-2026-22702","CVE-2026-22702","PYSEC-2026-2009",[138,2625],"2026-01-13T18:45:57Z","2026-07-07T17:57:28.238961214Z",[2630],{"type":2163,"score":2631},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[2633,2635,2637,2639,2641,2643,2645],{"type":2178,"url":2634},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-597g-3phw-6986",{"type":2167,"url":2636},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22702",{"type":2178,"url":2638},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3013",{"type":2172,"url":2640},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fdec4cec5d16edaf83a00a658f32d1e032661cebc",{"type":2175,"url":2642},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv",{"type":2175,"url":2644},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvirtualenv",{"type":2167,"url":2646},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-597g-3phw-6986",[2648,2649,2650,2651],"pypi:virtualenv@20.30.0","pypi:virtualenv@20.31.1","pypi:virtualenv@20.34.0","pypi:virtualenv@20.35.4",{"id":139,"slug":2653,"dossier":45,"summary":2654,"aliases":2655,"sourceIds":2658,"published":2659,"modified":2660,"checkedAt":7,"severity":2661,"references":2665,"versionKeys":2678,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[2656,2657],"CVE-2024-53981","PYSEC-2026-1851",[139,2657],"2024-12-02T21:37:04Z","2026-07-07T17:56:30.840745333Z",[2662,2663],{"type":2163,"score":2238},{"type":2235,"score":2664},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2666,2668,2670,2672,2674,2676],{"type":2178,"url":2667},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":2167,"url":2669},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":2178,"url":2671},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":2175,"url":2673},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":2175,"url":2675},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":2167,"url":2677},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[2679],"pypi:python-multipart@0.0.9",{"id":140,"slug":2681,"dossier":45,"summary":2682,"aliases":2683,"sourceIds":2686,"published":2687,"modified":2688,"checkedAt":7,"severity":2689,"references":2692,"versionKeys":2707,"packageCount":32,"repositoryCount":34},"ghsa-5jmr-gcrj-2c9q-651d4e44","LiteLLM: Arbitrary file write via path traversal in Skills archive extraction",[2684,2685],"CVE-2026-59820","PYSEC-2026-3477",[140,2685],"2026-07-22T22:37:15Z","2026-07-23T15:11:39.917682016Z",[2690],{"type":2235,"score":2691},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2693,2695,2697,2699,2701,2702,2704,2705],{"type":2178,"url":2694},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-5jmr-gcrj-2c9q",{"type":2167,"url":2696},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59820",{"type":2178,"url":2698},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fpull\u002F25475",{"type":2178,"url":2700},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F6a15adcd64137d37f73dee76dfe7481f8c2d9196",{"type":2175,"url":2427},{"type":2178,"url":2703},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.83.7-stable",{"type":2175,"url":2431},{"type":2167,"url":2706},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5jmr-gcrj-2c9q",[2435,2436,2437,2438],{"id":141,"slug":2709,"dossier":45,"summary":2710,"aliases":2711,"sourceIds":2714,"published":2715,"modified":2716,"checkedAt":7,"severity":2717,"references":2719,"versionKeys":2728,"packageCount":32,"repositoryCount":370},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[2712,2713],"CVE-2026-53539","PYSEC-2026-3036",[141,2713],"2026-06-15T20:24:09Z","2026-07-13T16:42:40.830680801Z",[2718],{"type":2163,"score":2238},[2720,2722,2723,2724,2726],{"type":2178,"url":2721},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":2175,"url":2673},{"type":2175,"url":2675},{"type":2167,"url":2725},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":2167,"url":2727},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[2729,2730,2679],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20",{"id":142,"slug":2732,"dossier":45,"summary":2733,"aliases":2734,"sourceIds":2737,"published":2738,"modified":2739,"checkedAt":7,"severity":2740,"references":2746,"versionKeys":2757,"packageCount":32,"repositoryCount":320},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[2735,2736],"CVE-2026-34520","PYSEC-2026-2102",[142,2736],"2026-04-01T21:17:00.333Z","2026-07-15T22:00:51.319409225Z",[2741,2743,2744],{"type":2163,"score":2742},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":2235,"score":2266},{"type":2235,"score":2745},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2747,2749,2751,2753,2754,2755],{"type":2172,"url":2748},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":2167,"url":2750},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":2172,"url":2752},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":2175,"url":2243},{"type":2167,"url":2278},{"type":2178,"url":2756},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[2247,2248,2249,2250,2251,2252,2253,2254],{"id":143,"slug":2759,"dossier":45,"summary":2760,"aliases":2761,"sourceIds":2764,"published":2765,"modified":2766,"checkedAt":7,"severity":2767,"references":2770,"versionKeys":2776,"packageCount":32,"repositoryCount":320},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[2762,2763],"CVE-2026-54277","PYSEC-2026-2110",[143,2763],"2026-06-15T20:09:16Z","2026-07-13T07:26:29.010491244Z",[2768,2769],{"type":2235,"score":2398},{"type":2163,"score":2238},[2771,2773,2775],{"type":2167,"url":2772},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":2172,"url":2774},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":2175,"url":2243},[2247,2248,2249,2250,2251,2252,2253,2254],{"id":144,"slug":2778,"dossier":45,"summary":2779,"aliases":2780,"sourceIds":2783,"published":2784,"modified":2785,"checkedAt":7,"severity":2786,"references":2788,"versionKeys":2829,"packageCount":32,"repositoryCount":351},"ghsa-63vm-454h-vhhq-296aa7fc","pyasn1 has a DoS vulnerability in decoder",[2781,2782],"CVE-2026-23490","PYSEC-2026-1810",[144,2782],"2026-01-16T19:19:25Z","2026-07-21T15:30:39.563600361Z",[2787],{"type":2163,"score":2238},[2789,2791,2793,2795,2797,2799,2801,2803,2805,2807,2809,2811,2813,2815,2817,2819,2821,2823,2825,2827],{"type":2178,"url":2790},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-63vm-454h-vhhq",{"type":2167,"url":2792},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-23490",{"type":2178,"url":2794},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fbe353d755f42ea36539b4f5053c652ddf56979a6",{"type":2178,"url":2796},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F3908f144229eed4df24bd569d16e5991ace44970",{"type":2178,"url":2798},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4148",{"type":2178,"url":2800},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4147",{"type":2178,"url":2802},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4146",{"type":2178,"url":2804},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4145",{"type":2178,"url":2806},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4144",{"type":2178,"url":2808},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4143",{"type":2178,"url":2810},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4142",{"type":2178,"url":2812},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4141",{"type":2178,"url":2814},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4140",{"type":2178,"url":2816},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4139",{"type":2178,"url":2818},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4138",{"type":2178,"url":2820},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:39894",{"type":2175,"url":2822},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1",{"type":2178,"url":2824},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fblob\u002F0f07d7242a78ab4d129b26256d7474f7168cf536\u002Fpyasn1\u002Fcodec\u002Fber\u002Fdecoder.py#L496",{"type":2178,"url":2826},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.2",{"type":2178,"url":2828},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F02\u002Fmsg00002.html",[2830],"pypi:pyasn1@0.6.1",{"id":145,"slug":2832,"dossier":89,"summary":2833,"aliases":2834,"sourceIds":2837,"published":2838,"modified":2839,"checkedAt":7,"severity":2840,"references":2844,"versionKeys":2853,"packageCount":32,"repositoryCount":2857},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[2835,2836],"CVE-2026-45409","PYSEC-2026-215",[145,2836],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[2841,2842],{"type":2163,"score":2202},{"type":2235,"score":2843},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2845,2847,2849,2851],{"type":2167,"url":2846},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":2167,"url":2848},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":2175,"url":2850},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":2178,"url":2852},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[2854,2855,2856],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",17,{"id":146,"slug":2859,"dossier":45,"summary":2860,"aliases":2861,"sourceIds":2864,"published":2865,"modified":2866,"checkedAt":7,"severity":2867,"references":2869,"versionKeys":2880,"packageCount":32,"repositoryCount":351},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[2862,2863],"CVE-2025-69224","PYSEC-2026-1099",[146,2863],"2026-01-05T22:58:57Z","2026-07-07T17:56:40.774148412Z",[2868],{"type":2235,"score":2266},[2870,2872,2874,2876,2877,2878],{"type":2178,"url":2871},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":2167,"url":2873},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":2172,"url":2875},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":2175,"url":2243},{"type":2175,"url":2615},{"type":2167,"url":2879},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[2247,2248,2249,2250,2251,2252,2253],{"id":147,"slug":2882,"dossier":45,"summary":2883,"aliases":2884,"sourceIds":2885,"published":2886,"modified":2887,"checkedAt":7,"severity":2888,"references":2891,"versionKeys":2895,"packageCount":32,"repositoryCount":34},"ghsa-69x8-hrgq-fjj8-13befa28","LiteLLM: Password hash exposure and pass-the-hash authentication bypass",[],[147],"2026-04-08T00:04:12Z","2026-04-17T01:29:14.845270912Z",[2889],{"type":2235,"score":2890},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2892,2894],{"type":2178,"url":2893},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-69x8-hrgq-fjj8",{"type":2175,"url":2427},[2435,2436,2437,2438],{"id":148,"slug":2897,"dossier":45,"summary":2898,"aliases":2899,"sourceIds":2902,"published":2903,"modified":2904,"checkedAt":7,"severity":2905,"references":2907,"versionKeys":2920,"packageCount":32,"repositoryCount":32},"ghsa-6hr6-w5qg-qmwg-135c855f","h2: Duplicate Host header could facilitate request smuggling",[2900,2901],"CVE-2026-71554","PYSEC-2026-3628",[148,2901],"2026-08-06T21:53:41Z","2026-08-10T11:41:00.491339150Z",[2906],{"type":2163,"score":2202},[2908,2910,2912,2914,2916,2918],{"type":2178,"url":2909},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh2\u002Fsecurity\u002Fadvisories\u002FGHSA-6hr6-w5qg-qmwg",{"type":2178,"url":2911},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh2\u002Fcommit\u002F292a40829feefda98c8509dcdbbb4a57af9bd6a6",{"type":2175,"url":2913},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh2",{"type":2175,"url":2915},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh2",{"type":2167,"url":2917},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6hr6-w5qg-qmwg",{"type":2167,"url":2919},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71554",[2921],"pypi:h2@4.1.0",{"id":149,"slug":2923,"dossier":45,"summary":2924,"aliases":2925,"sourceIds":2928,"published":2929,"modified":2930,"checkedAt":7,"severity":2931,"references":2933,"versionKeys":2944,"packageCount":32,"repositoryCount":351},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[2926,2927],"CVE-2025-69228","PYSEC-2026-1100",[149,2927],"2026-01-05T23:13:14Z","2026-07-07T17:57:35.249454020Z",[2932],{"type":2235,"score":2398},[2934,2936,2938,2940,2941,2942],{"type":2178,"url":2935},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":2167,"url":2937},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":2172,"url":2939},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":2175,"url":2243},{"type":2175,"url":2615},{"type":2167,"url":2943},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[2247,2248,2249,2250,2251,2252,2253],{"id":150,"slug":2946,"dossier":45,"summary":2947,"aliases":2948,"sourceIds":2951,"published":2952,"modified":2953,"checkedAt":7,"severity":2954,"references":2957,"versionKeys":2966,"packageCount":32,"repositoryCount":370},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[2949,2950],"CVE-2026-53538","PYSEC-2026-3037",[150,2950],"2026-06-15T20:22:25Z","2026-07-13T16:43:47.733262470Z",[2955],{"type":2163,"score":2956},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2958,2960,2961,2962,2964],{"type":2178,"url":2959},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":2175,"url":2673},{"type":2175,"url":2675},{"type":2167,"url":2963},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":2167,"url":2965},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[2729,2730,2679],{"id":151,"slug":2968,"dossier":45,"summary":2969,"aliases":2970,"sourceIds":2973,"published":2974,"modified":2975,"checkedAt":7,"severity":2976,"references":2978,"versionKeys":2989,"packageCount":32,"repositoryCount":351},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[2971,2972],"CVE-2025-69223","PYSEC-2026-1101",[151,2972],"2026-01-05T22:58:41Z","2026-07-07T17:56:11.402262091Z",[2977],{"type":2163,"score":2238},[2979,2981,2983,2985,2986,2987],{"type":2178,"url":2980},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":2167,"url":2982},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":2172,"url":2984},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":2175,"url":2243},{"type":2175,"url":2615},{"type":2167,"url":2988},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[2247,2248,2249,2250,2251,2252,2253],{"id":152,"slug":2991,"dossier":45,"summary":2992,"aliases":2993,"sourceIds":2996,"published":2997,"modified":2998,"checkedAt":7,"severity":2999,"references":3002,"versionKeys":3021,"packageCount":32,"repositoryCount":64},"ghsa-6w46-j5rx-g56g-5324d549","pytest has vulnerable tmpdir handling",[2994,2995],"CVE-2025-71176","PYSEC-2026-1845",[152,2995],"2026-01-22T06:30:29Z","2026-07-07T17:56:26.471696626Z",[3000],{"type":2163,"score":3001},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:L",[3003,3005,3007,3009,3011,3013,3015,3017,3019],{"type":2167,"url":3004},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71176",{"type":2178,"url":3006},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fissues\u002F13669",{"type":2178,"url":3008},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fpull\u002F14343",{"type":2178,"url":3010},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Fcommit\u002F95d8423bd24992deea5b9df32555fa1741679e2c",{"type":2175,"url":3012},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytes",{"type":2178,"url":3014},"https:\u002F\u002Fgithub.com\u002Fpytest-dev\u002Fpytest\u002Freleases\u002Ftag\u002F9.0.3",{"type":2178,"url":3016},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2026\u002F01\u002F21\u002F5",{"type":2175,"url":3018},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytest",{"type":2167,"url":3020},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6w46-j5rx-g56g",[3022,3023,3024,3025],"pypi:pytest@7.2.2","pypi:pytest@7.4.4","pypi:pytest@8.3.2","pypi:pytest@9.0.2",{"id":153,"slug":3027,"dossier":45,"summary":3028,"aliases":3029,"sourceIds":3032,"published":3033,"modified":3034,"checkedAt":7,"severity":3035,"references":3038,"versionKeys":3051,"packageCount":32,"repositoryCount":34},"ghsa-72m8-9m7m-h278-09927b5d","LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks",[3030,3031],"CVE-2026-59821","PYSEC-2026-3478",[153,3031],"2026-07-22T22:38:55Z","2026-07-23T15:11:26.912539142Z",[3036],{"type":2235,"score":3037},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:H\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3039,3041,3043,3045,3046,3048,3049],{"type":2178,"url":3040},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-72m8-9m7m-h278",{"type":2167,"url":3042},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59821",{"type":2178,"url":3044},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002Fe50b4486d0f7aa0497185a1ebcdd2c91f1769eba",{"type":2175,"url":2427},{"type":2178,"url":3047},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.82.0-stable",{"type":2175,"url":2431},{"type":2167,"url":3050},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-72m8-9m7m-h278",[2435,2436,2437,2438],{"id":154,"slug":3053,"dossier":45,"summary":3054,"aliases":3055,"sourceIds":3058,"published":3059,"modified":3060,"checkedAt":7,"severity":3061,"references":3064,"versionKeys":3078,"packageCount":32,"repositoryCount":34},"ghsa-7488-6r32-c95q-deb7c5f3","LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback",[3056,3057],"CVE-2026-59822","PYSEC-2026-3479",[154,3057],"2026-07-22T22:38:33Z","2026-07-23T15:11:29.132983365Z",[3062],{"type":2235,"score":3063},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3065,3067,3069,3071,3073,3074,3075,3076],{"type":2178,"url":3066},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-7488-6r32-c95q",{"type":2167,"url":3068},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59822",{"type":2178,"url":3070},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fpull\u002F26463",{"type":2178,"url":3072},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F73869f0faf7d11ee21adcb5f91b8c33a340b6c2c",{"type":2175,"url":2427},{"type":2178,"url":2500},{"type":2175,"url":2431},{"type":2167,"url":3077},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7488-6r32-c95q",[2435,2436,2437,2438],{"id":155,"slug":3080,"dossier":45,"summary":3081,"aliases":3082,"sourceIds":3085,"published":3086,"modified":3087,"checkedAt":7,"severity":3088,"references":3090,"versionKeys":3102,"packageCount":32,"repositoryCount":116},"ghsa-752w-5fwx-jx9f-389afa77","PyJWT accepts unknown `crit` header extensions",[3083,3084],"CVE-2026-32597","PYSEC-2026-120",[155,3084],"2026-03-13T19:55:09.500Z","2026-06-08T19:15:12.447890578Z",[3089],{"type":2163,"score":2164},[3091,3094,3096,3098,3100],{"type":3092,"url":3093},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-752w-5fwx-jx9f",{"type":2167,"url":3095},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32597",{"type":2175,"url":3097},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt",{"type":2178,"url":3099},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-120.yaml",{"type":2178,"url":3101},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00008.html",[3103,3104],"pypi:pyjwt@2.10.1","pypi:pyjwt@2.9.0",{"id":156,"slug":3106,"dossier":45,"summary":2551,"aliases":3107,"sourceIds":3110,"published":3111,"modified":3112,"checkedAt":7,"severity":3113,"references":3114,"versionKeys":3132,"packageCount":32,"repositoryCount":390},"ghsa-79v4-65xg-pq4g-b911b371",[3108,3109],"CVE-2024-12797","PYSEC-2026-1284",[156,3109],"2025-02-11T18:06:42Z","2026-07-07T17:57:01.916729628Z",[],[3115,3117,3119,3121,3123,3125,3126,3128,3130],{"type":2178,"url":3116},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",{"type":2167,"url":3118},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12797",{"type":2178,"url":3120},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F738d4f9fdeaad57660dcba50a619fafced3fd5e9",{"type":2178,"url":3122},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F798779d43494549b611233f92652f0da5328fbe7",{"type":2178,"url":3124},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F87ebd203feffcf92ad5889df92f90bb0ee10a699",{"type":2175,"url":2562},{"type":2178,"url":3127},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20250211.txt",{"type":2175,"url":3129},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcryptography",{"type":2167,"url":3131},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",[2566,2567,2568],{"id":157,"slug":3134,"dossier":45,"summary":3135,"aliases":3136,"sourceIds":3139,"published":3140,"modified":3141,"checkedAt":7,"severity":3142,"references":3144,"versionKeys":3161,"packageCount":32,"repositoryCount":370},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[3137,3138],"CVE-2025-62727","PYSEC-2026-1942",[157,3138],"2025-10-28T20:38:01Z","2026-07-07T17:56:07.620081354Z",[3143],{"type":2163,"score":2238},[3145,3147,3149,3151,3154,3156,3158,3159],{"type":2178,"url":3146},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":2167,"url":3148},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":2172,"url":3150},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":3152,"url":3153},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":2175,"url":3155},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":2178,"url":3157},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":2175,"url":2217},{"type":2167,"url":3160},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[2222,2223,3162,3163],"pypi:starlette@0.47.3","pypi:starlette@0.49.0",{"id":158,"slug":3165,"dossier":45,"summary":3166,"aliases":3167,"sourceIds":3170,"published":3171,"modified":3172,"checkedAt":7,"severity":3173,"references":3176,"versionKeys":3193,"packageCount":32,"repositoryCount":40},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[3168,3169],"CVE-2026-0994","PYSEC-2026-1805",[158,3169],"2026-01-23T15:31:35Z","2026-07-07T17:56:36.712428283Z",[3174],{"type":2235,"score":3175},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[3177,3179,3181,3183,3185,3187,3189,3191],{"type":2167,"url":3178},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":2178,"url":3180},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":2178,"url":3182},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":2178,"url":3184},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":2178,"url":3186},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":2175,"url":3188},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":2175,"url":3190},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":2167,"url":3192},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[3194,3195,3196,3197,3198,3199,3200,3201,3202],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":159,"slug":3204,"dossier":45,"summary":3205,"aliases":3206,"sourceIds":3209,"published":3210,"modified":3211,"checkedAt":7,"severity":3212,"references":3214,"versionKeys":3218,"packageCount":32,"repositoryCount":331},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[3207,3208],"CVE-2026-54283","PYSEC-2026-249",[159,3208],"2026-06-15T20:39:53Z","2026-06-27T11:26:15.727496147Z",[3213],{"type":2163,"score":2238},[3215,3217],{"type":2167,"url":3216},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":2175,"url":3155},[2221,2222,2223,3162,3163,3219,3220],"pypi:starlette@0.49.3","pypi:starlette@0.50.0",{"id":160,"slug":3222,"dossier":45,"summary":3223,"aliases":3224,"sourceIds":3227,"published":3228,"modified":3229,"checkedAt":7,"severity":3230,"references":3233,"versionKeys":3246,"packageCount":32,"repositoryCount":32},"ghsa-847f-9342-265h-4ea27b92","h2 allows HTTP Request Smuggling due to illegal characters in headers",[3225,3226],"CVE-2025-57804","PYSEC-2026-1435",[160,3226],"2025-08-25T20:44:43Z","2026-07-07T17:56:31.705755225Z",[3231],{"type":2235,"score":3232},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:L\u002FSA:N",[3234,3236,3238,3240,3241,3243,3244],{"type":2178,"url":3235},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh2\u002Fsecurity\u002Fadvisories\u002FGHSA-847f-9342-265h",{"type":2167,"url":3237},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-57804",{"type":2178,"url":3239},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh2\u002Fcommit\u002F035e9899f95e3709af098f578bfc3cd302298e3a",{"type":2175,"url":2913},{"type":2178,"url":3242},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F09\u002Fmsg00004.html",{"type":2175,"url":2915},{"type":2167,"url":3245},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-847f-9342-265h",[2921],{"id":161,"slug":3248,"dossier":45,"summary":3249,"aliases":3250,"sourceIds":3254,"published":3255,"modified":3256,"checkedAt":7,"severity":3257,"references":3260,"versionKeys":3297,"packageCount":32,"repositoryCount":331},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[3251,3252,3253],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[161,3252],"2026-05-22T13:10:03Z","2026-08-07T12:46:17.536847233Z",[3258],{"type":2163,"score":3259},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3261,3263,3265,3267,3269,3271,3273,3275,3277,3279,3280,3282,3285,3287,3289,3291,3293,3295],{"type":2167,"url":3262},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":2167,"url":3264},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":2172,"url":3266},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":2178,"url":3268},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":2181,"url":3270},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":2178,"url":3272},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":2178,"url":3274},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":2178,"url":3276},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":2178,"url":3278},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":2175,"url":3155},{"type":2178,"url":3281},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":3283,"url":3284},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":2178,"url":3286},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":2178,"url":3288},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":2178,"url":3290},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":2178,"url":3292},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43038",{"type":2181,"url":3294},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":2167,"url":3296},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[2221,2222,2223,3162,3163,3219,3220],{"id":162,"slug":3299,"dossier":45,"summary":3300,"aliases":3301,"sourceIds":3304,"published":3305,"modified":3306,"checkedAt":7,"severity":3307,"references":3309,"versionKeys":3319,"packageCount":32,"repositoryCount":331},"ghsa-8ppf-4f7h-5ppj-4d7d140d","pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service",[3302,3303],"CVE-2026-59885","PYSEC-2026-3456",[162,3303],"2026-07-14T17:17:14.880Z","2026-07-23T09:29:39.188829469Z",[3308],{"type":2163,"score":2238},[3310,3312,3314,3316,3317],{"type":2167,"url":3311},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-8ppf-4f7h-5ppj",{"type":2167,"url":3313},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59885",{"type":2172,"url":3315},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F45bdb19eb7df4b3780fe9c912c63e99bffc39dd9",{"type":2175,"url":2822},{"type":2167,"url":3318},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.4",[2830,3320],"pypi:pyasn1@0.6.3",{"id":163,"slug":3322,"dossier":45,"summary":3323,"aliases":3324,"sourceIds":3327,"published":3328,"modified":3329,"checkedAt":7,"severity":3330,"references":3333,"versionKeys":3352,"packageCount":32,"repositoryCount":390},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[3325,3326],"CVE-2025-4565","PYSEC-2026-1806",[163,3326],"2025-06-16T16:02:58Z","2026-07-07T17:57:09.877491994Z",[3331],{"type":2235,"score":3332},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3334,3336,3338,3340,3342,3343,3345,3347,3349,3350],{"type":2178,"url":3335},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":2178,"url":3337},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":2167,"url":3339},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":2178,"url":3341},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":2175,"url":3188},{"type":2178,"url":3344},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":2178,"url":3346},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":2178,"url":3348},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":2175,"url":3190},{"type":2167,"url":3351},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[3194,3196,3197],{"id":164,"slug":3354,"dossier":45,"summary":3355,"aliases":3356,"sourceIds":3359,"published":3360,"modified":3361,"checkedAt":7,"severity":3362,"references":3365,"versionKeys":3376,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[3357,3358],"CVE-2025-53643","PYSEC-2026-1104",[164,3358],"2025-07-14T19:33:31Z","2026-07-07T17:56:52.935544397Z",[3363],{"type":2235,"score":3364},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3366,3368,3370,3372,3373,3374],{"type":2178,"url":3367},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":2167,"url":3369},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":2172,"url":3371},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":2175,"url":2243},{"type":2175,"url":2615},{"type":2167,"url":3375},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[2247,2248,2249,2250],{"id":165,"slug":3378,"dossier":45,"summary":3379,"aliases":3380,"sourceIds":3383,"published":3384,"modified":3385,"checkedAt":7,"severity":3386,"references":3390,"versionKeys":3399,"packageCount":32,"repositoryCount":320},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[3381,3382],"CVE-2026-34518","PYSEC-2026-2100",[165,3382],"2026-04-01T21:17:00.020Z","2026-07-13T07:26:39.502317923Z",[3387,3389],{"type":2163,"score":3388},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":2235,"score":2605},[3391,3393,3395,3397,3398],{"type":2172,"url":3392},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":2167,"url":3394},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":2172,"url":3396},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":2175,"url":2243},{"type":2167,"url":2278},[2247,2248,2249,2250,2251,2252,2253,2254],{"id":166,"slug":3401,"dossier":45,"summary":3402,"aliases":3403,"sourceIds":3406,"published":3407,"modified":3408,"checkedAt":7,"severity":3409,"references":3412,"versionKeys":3422,"packageCount":32,"repositoryCount":116},"ghsa-993g-76c3-p5m4-f823cd66","PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file:\u002F\u002F, ftp:\u002F\u002F, data: schemes",[3404,3405],"CVE-2026-48522","PYSEC-2026-175",[166,3405],"2026-05-28T16:16:29.150Z","2026-07-31T22:15:22.444788060Z",[3410],{"type":2163,"score":3411},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3413,3415,3417,3419,3420],{"type":3092,"url":3414},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-993g-76c3-p5m4",{"type":2167,"url":3416},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48522",{"type":2178,"url":3418},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8521",{"type":2175,"url":3097},{"type":2178,"url":3421},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-175.yaml",[3103,3104],{"id":167,"slug":3424,"dossier":45,"summary":3425,"aliases":3426,"sourceIds":3429,"published":3430,"modified":3431,"checkedAt":7,"severity":3432,"references":3435,"versionKeys":3450,"packageCount":32,"repositoryCount":116},"ghsa-9h52-p55h-vw2f-fc4c91e7","Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default",[3427,3428],"CVE-2025-66416","PYSEC-2026-1617",[167,3428],"2025-12-02T16:52:08Z","2026-07-16T18:45:48.199773308Z",[3433],{"type":2235,"score":3434},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3436,3438,3440,3442,3444,3446,3448],{"type":2178,"url":3437},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":2167,"url":3439},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66416",{"type":2178,"url":3441},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fd3a184119e4479ea6a63590bc41f01dc06e3fa99",{"type":2167,"url":3443},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9h52-p55h-vw2f",{"type":2175,"url":3445},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk",{"type":2178,"url":3447},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmcp\u002FPYSEC-2026-1617.yaml",{"type":2175,"url":3449},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmcp",[3451,3452],"pypi:mcp@1.10.0","pypi:mcp@1.14.1",{"id":168,"slug":3454,"dossier":45,"summary":3455,"aliases":3456,"sourceIds":3459,"published":3460,"modified":3461,"checkedAt":7,"severity":3462,"references":3465,"versionKeys":3484,"packageCount":32,"repositoryCount":351},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[3457,3458],"CVE-2024-47081","PYSEC-2026-1872",[168,3458],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[3463],{"type":2163,"score":3464},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3466,3468,3470,3472,3474,3476,3478,3480,3482],{"type":2178,"url":3467},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":2167,"url":3469},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":2178,"url":3471},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":2172,"url":3473},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":2175,"url":3475},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":2178,"url":3477},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":2178,"url":3479},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":2175,"url":3481},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":2167,"url":3483},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[3485,3486],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":169,"slug":3488,"dossier":45,"summary":3489,"aliases":3490,"sourceIds":3493,"published":3494,"modified":3495,"checkedAt":7,"severity":3496,"references":3499,"versionKeys":3516,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[3491,3492],"CVE-2024-35195","PYSEC-2026-1873",[169,3492],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[3497],{"type":2163,"score":3498},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[3500,3502,3504,3506,3508,3509,3511,3513,3514],{"type":2178,"url":3501},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":2167,"url":3503},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":2178,"url":3505},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":2172,"url":3507},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":2175,"url":3475},{"type":2178,"url":3510},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":2178,"url":3512},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":2175,"url":3481},{"type":2167,"url":3515},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[3485],{"id":170,"slug":3518,"dossier":45,"summary":3519,"aliases":3520,"sourceIds":3523,"published":3524,"modified":3525,"checkedAt":7,"severity":3526,"references":3530,"versionKeys":3536,"packageCount":32,"repositoryCount":320},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[3521,3522],"CVE-2026-54280","PYSEC-2026-2113",[170,3522],"2026-06-15T20:10:44Z","2026-07-13T07:26:14.649569270Z",[3527,3529],{"type":2235,"score":3528},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2163,"score":2238},[3531,3533,3535],{"type":2167,"url":3532},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":2172,"url":3534},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":2175,"url":2243},[2247,2248,2249,2250,2251,2252,2253,2254],{"id":171,"slug":3538,"dossier":45,"summary":3539,"aliases":3540,"sourceIds":3543,"published":3544,"modified":3545,"checkedAt":7,"severity":3546,"references":3550,"versionKeys":3561,"packageCount":32,"repositoryCount":320},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[3541,3542],"CVE-2026-34525","PYSEC-2026-2103",[171,3542],"2026-04-01T21:17:00.490Z","2026-07-13T07:26:42.158681139Z",[3547,3549],{"type":2235,"score":3548},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":2163,"score":2268},[3551,3553,3555,3557,3559,3560],{"type":2172,"url":3552},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":2167,"url":3554},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":2172,"url":3556},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":2172,"url":3558},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":2175,"url":2243},{"type":2167,"url":2278},[2247,2248,2249,2250,2251,2252,2253,2254],{"id":172,"slug":3563,"dossier":45,"summary":3564,"aliases":3565,"sourceIds":3568,"published":3569,"modified":3570,"checkedAt":7,"severity":3571,"references":3574,"versionKeys":3591,"packageCount":32,"repositoryCount":116},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[3566,3567],"CVE-2025-27516","PYSEC-2026-1471",[172,3567],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[3572],{"type":2235,"score":3573},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3575,3577,3579,3581,3583,3585,3587,3589],{"type":2178,"url":3576},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":2167,"url":3578},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":2172,"url":3580},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":2175,"url":3582},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":2178,"url":3584},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":2178,"url":3586},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":2175,"url":3588},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":2167,"url":3590},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[3592,3593],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":173,"slug":3595,"dossier":45,"summary":3596,"aliases":3597,"sourceIds":3600,"published":3601,"modified":3602,"checkedAt":7,"severity":3603,"references":3606,"versionKeys":3621,"packageCount":32,"repositoryCount":3623},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[3598,3599],"CVE-2026-69244","PYSEC-2026-3545",[173,3599],"2026-08-03T20:51:13Z","2026-08-04T21:27:00.629113523Z",[3604],{"type":2235,"score":3605},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3607,3609,3611,3613,3614,3616,3617,3619],{"type":2178,"url":3608},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":2178,"url":3610},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":2178,"url":3612},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":2175,"url":2243},{"type":2178,"url":3615},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":2175,"url":2615},{"type":2167,"url":3618},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":2167,"url":3620},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[2247,2248,2249,2250,2251,2252,2253,2254,3622],"pypi:aiohttp@3.14.1",11,{"id":174,"slug":3625,"dossier":45,"summary":3626,"aliases":3627,"sourceIds":3630,"published":3631,"modified":3632,"checkedAt":7,"severity":3633,"references":3637,"versionKeys":3648,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[3628,3629],"CVE-2024-47874","PYSEC-2026-1943",[174,3629],"2024-10-15T18:12:57Z","2026-07-07T17:57:05.823442628Z",[3634,3636],{"type":2163,"score":3635},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":2235,"score":2664},[3638,3640,3642,3644,3645,3646],{"type":2178,"url":3639},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":2167,"url":3641},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":2172,"url":3643},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":2175,"url":2211},{"type":2175,"url":2217},{"type":2167,"url":3647},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[2221],{"id":175,"slug":3650,"dossier":45,"summary":3651,"aliases":3652,"sourceIds":3655,"published":3656,"modified":3657,"checkedAt":7,"severity":3658,"references":3661,"versionKeys":3674,"packageCount":32,"repositoryCount":32},"ghsa-fh2c-86xm-pm2x-ff1ac9ef","LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request",[3653,3654],"CVE-2024-8984","PYSEC-2026-1545",[175,3654],"2025-03-20T12:32:49Z","2026-07-07T17:56:56.562714379Z",[3659],{"type":2163,"score":3660},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3662,3664,3666,3667,3669,3671,3672],{"type":2167,"url":3663},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-8984",{"type":2178,"url":3665},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F4f49f836aa844ac9b6bfbeff27e6f6b2b9cf3f61",{"type":2175,"url":2427},{"type":2178,"url":3668},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fblob\u002F8c5ff150f6142608ffe968e4e68429f978fda187\u002Flitellm\u002Ftests\u002Ftest_spend_logs.py#L242",{"type":2178,"url":3670},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F554fc76b-3097-4223-b4cf-110b853e9355",{"type":2175,"url":2431},{"type":2167,"url":3673},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh2c-86xm-pm2x",[2435],{"id":176,"slug":3676,"dossier":45,"summary":3677,"aliases":3678,"sourceIds":3681,"published":3682,"modified":3683,"checkedAt":7,"severity":3684,"references":3687,"versionKeys":3698,"packageCount":32,"repositoryCount":351},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[3679,3680],"CVE-2025-69230","PYSEC-2026-1105",[176,3680],"2026-01-05T23:13:46Z","2026-07-07T17:56:34.702331996Z",[3685],{"type":2235,"score":3686},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3688,3690,3692,3694,3695,3696],{"type":2178,"url":3689},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":2167,"url":3691},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":2172,"url":3693},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":2175,"url":2243},{"type":2175,"url":2615},{"type":2167,"url":3697},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[2247,2248,2249,2250,2251,2252,2253],{"id":177,"slug":3700,"dossier":45,"summary":3701,"aliases":3702,"sourceIds":3705,"published":3706,"modified":3707,"checkedAt":7,"severity":3708,"references":3711,"versionKeys":3721,"packageCount":32,"repositoryCount":116},"ghsa-fhv5-28vv-h8m8-c54a3f91","PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)",[3703,3704],"CVE-2026-48524","PYSEC-2026-177",[177,3704],"2026-05-28T16:16:29.403Z","2026-07-31T22:15:22.446184166Z",[3709],{"type":2163,"score":3710},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3712,3714,3716,3718,3719],{"type":2167,"url":3713},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-fhv5-28vv-h8m8",{"type":2167,"url":3715},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48524",{"type":2178,"url":3717},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8522",{"type":2175,"url":3097},{"type":2178,"url":3720},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-177.yaml",[3103,3104],{"id":178,"slug":3723,"dossier":45,"summary":3724,"aliases":3725,"sourceIds":3728,"published":3729,"modified":3730,"checkedAt":7,"severity":3731,"references":3733,"versionKeys":3748,"packageCount":32,"repositoryCount":32},"ghsa-fj7x-q9j7-g6q6-b2dae37d","Black vulnerable to Regular Expression Denial of Service (ReDoS)",[3726,3727],"CVE-2024-21503","PYSEC-2024-48",[178,3727],"2024-03-19T05:15:00Z","2026-06-10T17:00:37.560368446Z",[3732],{"type":2163,"score":2202},[3734,3736,3738,3740,3742,3744,3746],{"type":2167,"url":3735},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-21503",{"type":2172,"url":3737},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002Ff00093672628d212b8965a8993cee8bedf5fe9b8",{"type":2175,"url":3739},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack",{"type":2178,"url":3741},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Freleases\u002Ftag\u002F24.3.0",{"type":2178,"url":3743},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fblack\u002FPYSEC-2024-48.yaml",{"type":2178,"url":3745},"https:\u002F\u002Fsecurity.snyk.io\u002Fvuln\u002FSNYK-PYTHON-BLACK-6256273",{"type":2167,"url":3747},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7x-q9j7-g6q6",[3749],"pypi:black@23.12.1",{"id":179,"slug":3751,"dossier":45,"summary":3752,"aliases":3753,"sourceIds":3756,"published":3757,"modified":3758,"checkedAt":7,"severity":3759,"references":3762,"versionKeys":3773,"packageCount":32,"repositoryCount":32},"ghsa-fjcf-3j3r-78rp-3506a50a","LiteLLM Has an Improper Authorization Vulnerability",[3754,3755],"CVE-2025-0628","PYSEC-2026-1546",[179,3755],"2025-03-20T12:32:52Z","2026-07-07T17:56:36.033233141Z",[3760],{"type":2163,"score":3761},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[3763,3765,3767,3768,3770,3771],{"type":2167,"url":3764},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-0628",{"type":2178,"url":3766},"https:\u002F\u002Fgithub.com\u002Fberriai\u002Flitellm\u002Fcommit\u002F566d9354aab4215091b2e51ad0333e948125fa1b",{"type":2175,"url":2427},{"type":2178,"url":3769},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6c0e2f75-2d03-42f9-9530-e16a973317fc",{"type":2175,"url":2431},{"type":2167,"url":3772},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fjcf-3j3r-78rp",[2435],{"id":180,"slug":3775,"dossier":45,"summary":3776,"aliases":3777,"sourceIds":3780,"published":3781,"modified":3782,"checkedAt":7,"severity":3783,"references":3786,"versionKeys":3792,"packageCount":32,"repositoryCount":320},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[3778,3779],"CVE-2026-54278","PYSEC-2026-2111",[180,3779],"2026-06-15T20:09:51Z","2026-07-13T07:26:25.190325605Z",[3784,3785],{"type":2235,"score":2398},{"type":2163,"score":2238},[3787,3789,3790],{"type":2167,"url":3788},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":2175,"url":2243},{"type":2172,"url":3791},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[2247,2248,2249,2250,2251,2252,2253,2254],{"id":181,"slug":3794,"dossier":45,"summary":3795,"aliases":3796,"sourceIds":3799,"published":3800,"modified":3801,"checkedAt":7,"severity":3802,"references":3805,"versionKeys":3818,"packageCount":32,"repositoryCount":351},"ghsa-g6cj-pr64-35w5-fd75eedf","cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing",[3797,3798],"CVE-2026-69247","PYSEC-2026-3552",[181,3798],"2026-08-03T21:17:00Z","2026-08-04T21:26:57.762682357Z",[3803],{"type":2235,"score":3804},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3806,3808,3810,3812,3813,3814,3816],{"type":2178,"url":3807},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":2178,"url":3809},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F15369",{"type":2178,"url":3811},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F53fccd93413a8d7f07d6d8999681f27b75cffa3f",{"type":2175,"url":2562},{"type":2175,"url":3129},{"type":2167,"url":3815},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":2167,"url":3817},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69247",[2568,2569,2570,2571,3819,3820],"pypi:cryptography@48.0.1","pypi:cryptography@49.0.0",{"id":182,"slug":3822,"dossier":45,"summary":3823,"aliases":3824,"sourceIds":3827,"published":3828,"modified":3829,"checkedAt":7,"severity":3830,"references":3833,"versionKeys":3852,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[3825,3826],"CVE-2024-34062","PYSEC-2026-1976",[182,3826],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[3831],{"type":2163,"score":3832},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3834,3836,3838,3840,3842,3844,3846,3848,3850],{"type":2178,"url":3835},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":2167,"url":3837},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":2178,"url":3839},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":2175,"url":3841},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":2178,"url":3843},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":2178,"url":3845},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":2178,"url":3847},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":2175,"url":3849},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":2167,"url":3851},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[3853],"pypi:tqdm@4.66.2",{"id":183,"slug":3855,"dossier":45,"summary":3856,"aliases":3857,"sourceIds":3860,"published":3861,"modified":3862,"checkedAt":7,"severity":3863,"references":3865,"versionKeys":3878,"packageCount":32,"repositoryCount":351},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[3858,3859],"CVE-2025-69229","PYSEC-2026-1106",[183,3859],"2026-01-05T23:13:29Z","2026-07-07T17:56:31.463290158Z",[3864],{"type":2235,"score":2398},[3866,3868,3870,3872,3874,3875,3876],{"type":2178,"url":3867},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":2167,"url":3869},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":2178,"url":3871},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":2178,"url":3873},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":2175,"url":2243},{"type":2175,"url":2615},{"type":2167,"url":3877},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[2247,2248,2249,2250,2251,2252,2253],{"id":184,"slug":3880,"dossier":89,"summary":3881,"aliases":3882,"sourceIds":3885,"published":3886,"modified":3887,"checkedAt":7,"severity":3888,"references":3893,"versionKeys":3903,"packageCount":32,"repositoryCount":3906},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[3883,3884],"CVE-2026-25645","PYSEC-2026-2275",[184,3884],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[3889,3891],{"type":2163,"score":3890},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":2163,"score":3892},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[3894,3896,3898,3900,3901],{"type":2167,"url":3895},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":2167,"url":3897},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":2172,"url":3899},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":2175,"url":3475},{"type":2167,"url":3902},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[3485,3486,3904,3905],"pypi:requests@2.32.4","pypi:requests@2.32.5",15,{"id":185,"slug":3908,"dossier":89,"summary":3909,"aliases":3910,"sourceIds":3913,"published":3914,"modified":3915,"checkedAt":7,"severity":3916,"references":3918,"versionKeys":3929,"packageCount":32,"repositoryCount":2311},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[3911,3912],"CVE-2025-66418","PYSEC-2026-1998",[185,3912],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[3917],{"type":2235,"score":2291},[3919,3921,3923,3925,3926,3927],{"type":2178,"url":3920},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":2167,"url":3922},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":2172,"url":3924},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":2175,"url":2300},{"type":2175,"url":2302},{"type":2167,"url":3928},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[2306,2307,2308,2309,2310],{"id":186,"slug":3931,"dossier":45,"summary":3932,"aliases":3933,"sourceIds":3936,"published":3937,"modified":3938,"checkedAt":7,"severity":3939,"references":3943,"versionKeys":3958,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[3934,3935],"CVE-2024-56201","PYSEC-2026-1472",[186,3935],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[3940,3942],{"type":2163,"score":3941},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2235,"score":3573},[3944,3946,3948,3950,3952,3953,3955,3956],{"type":2178,"url":3945},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":2167,"url":3947},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":2178,"url":3949},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":2172,"url":3951},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":2175,"url":3582},{"type":2178,"url":3954},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":2175,"url":3588},{"type":2167,"url":3957},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[3592],{"id":187,"slug":3960,"dossier":45,"summary":3961,"aliases":3962,"sourceIds":3963,"published":3964,"modified":3965,"checkedAt":7,"severity":3966,"references":3967,"versionKeys":3973,"packageCount":32,"repositoryCount":32},"ghsa-h4gh-qq45-vh27-43490265","pyca\u002Fcryptography has a vulnerable OpenSSL included in cryptography wheels",[],[187],"2024-09-03T21:59:48Z","2026-02-04T03:06:49.280647Z",[],[3968,3970,3971],{"type":2178,"url":3969},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-h4gh-qq45-vh27",{"type":2175,"url":2562},{"type":2178,"url":3972},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20240903.txt",[2566],{"id":188,"slug":3975,"dossier":45,"summary":3976,"aliases":3977,"sourceIds":3980,"published":3981,"modified":3982,"checkedAt":7,"severity":3983,"references":3986,"versionKeys":4007,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[3978,3979],"CVE-2024-34064","PYSEC-2026-1474",[188,3979],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[3984],{"type":2163,"score":3985},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3987,3989,3991,3993,3994,3996,3998,4000,4002,4004,4005],{"type":2178,"url":3988},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":2167,"url":3990},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":2172,"url":3992},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":2175,"url":3582},{"type":2178,"url":3995},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":2178,"url":3997},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":2178,"url":3999},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":2178,"url":4001},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":2178,"url":4003},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":2175,"url":3588},{"type":2167,"url":4006},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[3592],{"id":189,"slug":4009,"dossier":45,"summary":4010,"aliases":4011,"sourceIds":4014,"published":4015,"modified":4016,"checkedAt":7,"severity":4017,"references":4020,"versionKeys":4029,"packageCount":32,"repositoryCount":320},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[4012,4013],"CVE-2026-34513","PYSEC-2026-2095",[189,4013],"2026-04-01T21:16:59.267Z","2026-07-13T07:26:43.174352940Z",[4018,4019],{"type":2235,"score":2349},{"type":2163,"score":2238},[4021,4023,4025,4027,4028],{"type":2172,"url":4022},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":2167,"url":4024},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":2172,"url":4026},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":2175,"url":2243},{"type":2167,"url":2278},[2247,2248,2249,2250,2251,2252,2253,2254],{"id":190,"slug":4031,"dossier":45,"summary":4032,"aliases":4033,"sourceIds":4036,"published":4037,"modified":4038,"checkedAt":7,"severity":4039,"references":4044,"versionKeys":4052,"packageCount":32,"repositoryCount":320},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[4034,4035],"CVE-2026-47265","PYSEC-2026-2105",[190,4035],"2026-06-02T20:16:37.903Z","2026-07-13T07:26:51.969507320Z",[4040,4042],{"type":2235,"score":4041},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2163,"score":4043},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4045,4047,4049,4051],{"type":2172,"url":4046},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":2167,"url":4048},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":2172,"url":4050},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":2175,"url":2243},[2247,2248,2249,2250,2251,2252,2253,2254],{"id":191,"slug":4054,"dossier":45,"summary":4055,"aliases":4056,"sourceIds":4059,"published":4060,"modified":4061,"checkedAt":7,"severity":4062,"references":4064,"versionKeys":4073,"packageCount":32,"repositoryCount":331},"ghsa-hm4w-wwcw-mr6r-b3d243f3","pyasn1: Uncontrolled resource consumption when converting decoded REAL values",[4057,4058],"CVE-2026-59886","PYSEC-2026-3457",[191,4058],"2026-07-14T17:17:15.010Z","2026-07-23T09:29:38.810475714Z",[4063],{"type":2163,"score":2238},[4065,4067,4069,4071,4072],{"type":2167,"url":4066},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-hm4w-wwcw-mr6r",{"type":2167,"url":4068},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59886",{"type":2172,"url":4070},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fe60c691cb91addb8fcefa2f537e85ede6fb1e886",{"type":2175,"url":2822},{"type":2167,"url":3318},[2830,3320],{"id":192,"slug":4075,"dossier":45,"summary":4076,"aliases":4077,"sourceIds":4080,"published":4081,"modified":4082,"checkedAt":7,"severity":4083,"references":4088,"versionKeys":4103,"packageCount":32,"repositoryCount":116},"ghsa-hp6r-r9vc-q8wx-ba7ba143","FastAPI SSP is vulnerable to Cross-site Request Forgery (CSRF) through improper OAuth parameter validation",[4078,4079],"CVE-2025-14546","PYSEC-2026-1362",[192,4079],"2025-12-19T06:30:27Z","2026-07-07T17:56:29.184155368Z",[4084,4086],{"type":2163,"score":4085},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",{"type":2235,"score":4087},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:A\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[4089,4091,4093,4095,4097,4099,4101],{"type":2167,"url":4090},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14546",{"type":2178,"url":4092},"https:\u002F\u002Fgithub.com\u002Ftomasvotava\u002Ffastapi-sso\u002Fissues\u002F266",{"type":2178,"url":4094},"https:\u002F\u002Fgithub.com\u002Ftomasvotava\u002Ffastapi-sso\u002Fcommit\u002F6117d1a5ad498ba57d671e8a059ebe20db5abe02",{"type":2175,"url":4096},"https:\u002F\u002Fgithub.com\u002Ftomasvotava\u002Ffastapi-sso",{"type":2178,"url":4098},"https:\u002F\u002Fsecurity.snyk.io\u002Fvuln\u002FSNYK-PYTHON-FASTAPISSO-14386403",{"type":2175,"url":4100},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffastapi-sso",{"type":2167,"url":4102},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hp6r-r9vc-q8wx",[4104,4105],"pypi:fastapi-sso@0.10.0","pypi:fastapi-sso@0.16.0",{"id":193,"slug":4107,"dossier":45,"summary":4108,"aliases":4109,"sourceIds":4112,"published":4113,"modified":4114,"checkedAt":7,"severity":4115,"references":4120,"versionKeys":4126,"packageCount":32,"repositoryCount":320},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[4110,4111],"CVE-2026-54276","PYSEC-2026-2109",[193,4111],"2026-06-15T20:09:06Z","2026-07-13T07:26:28.701980401Z",[4116,4118],{"type":2235,"score":4117},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2163,"score":4119},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[4121,4123,4125],{"type":2167,"url":4122},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":2172,"url":4124},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":2175,"url":2243},[2247,2248,2249,2250,2251,2252,2253,2254],{"id":194,"slug":4128,"dossier":45,"summary":4129,"aliases":4130,"sourceIds":4133,"published":4134,"modified":4135,"checkedAt":7,"severity":4136,"references":4140,"versionKeys":4157,"packageCount":32,"repositoryCount":34},"ghsa-hx9q-6w63-j58v-8d6e2248","orjson does not limit recursion for deeply nested JSON documents",[4131,4132],"CVE-2025-67221","PYSEC-2026-107",[194,4132],"2026-01-22T17:16:01.433Z","2026-06-10T17:02:27.794281728Z",[4137,4139],{"type":2235,"score":4138},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2163,"score":2238},[4141,4143,4145,4147,4149,4151,4153,4155],{"type":2167,"url":4142},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67221",{"type":2178,"url":4144},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fissues\u002F620",{"type":2178,"url":4146},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002FCVE-2025-67221\u002Fissues\u002F1",{"type":2178,"url":4148},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fcommit\u002F62bb185b70785ded49c79c26f8c9781f1e6fe370",{"type":2175,"url":4150},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson",{"type":3092,"url":4152},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002Forjson_vulnerability",{"type":2178,"url":4154},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Forjson\u002FPYSEC-2026-107.yaml",{"type":2167,"url":4156},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hx9q-6w63-j58v",[4158,4159,4160,4161],"pypi:orjson@3.10.14","pypi:orjson@3.10.15","pypi:orjson@3.11.4","pypi:orjson@3.11.5",{"id":195,"slug":4163,"dossier":45,"summary":4164,"aliases":4165,"sourceIds":4168,"published":4169,"modified":4170,"checkedAt":7,"severity":4171,"references":4176,"versionKeys":4197,"packageCount":32,"repositoryCount":320},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[4166,4167],"CVE-2026-34993","PYSEC-2026-2104",[195,4167],"2026-06-02T20:16:34.857Z","2026-07-13T07:26:37.684367184Z",[4172,4174],{"type":2163,"score":4173},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":2163,"score":4175},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4177,4179,4181,4183,4184,4186,4188,4190,4192,4194],{"type":2172,"url":4178},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":2167,"url":4180},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":2172,"url":4182},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":2175,"url":2243},{"type":2178,"url":4185},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":2178,"url":4187},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":2167,"url":4189},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":2167,"url":4191},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":2167,"url":4193},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":4195,"url":4196},"REPORT","https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[2247,2248,2249,2250,2251,2252,2253,2254],{"id":196,"slug":4199,"dossier":45,"summary":4200,"aliases":4201,"sourceIds":4204,"published":4205,"modified":4206,"checkedAt":7,"severity":4207,"references":4209,"versionKeys":4220,"packageCount":32,"repositoryCount":351},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[4202,4203],"CVE-2025-69227","PYSEC-2026-1107",[196,4203],"2026-01-05T23:10:15Z","2026-07-07T17:57:17.782415842Z",[4208],{"type":2235,"score":2398},[4210,4212,4214,4216,4217,4218],{"type":2178,"url":4211},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":2167,"url":4213},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":2178,"url":4215},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":2175,"url":2243},{"type":2175,"url":2615},{"type":2167,"url":4219},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[2247,2248,2249,2250,2251,2252,2253],{"id":197,"slug":4222,"dossier":45,"summary":4223,"aliases":4224,"sourceIds":4227,"published":4228,"modified":4229,"checkedAt":7,"severity":4230,"references":4233,"versionKeys":4242,"packageCount":32,"repositoryCount":34},"ghsa-jjhc-v7c2-5hh6-5d2c89e6","LiteLLM: Authentication bypass via OIDC userinfo cache key collision",[4225,4226],"CVE-2026-35030","PYSEC-2026-390",[197,4226],"2026-04-03T21:59:50Z","2026-07-01T20:22:56.400828Z",[4231],{"type":2235,"score":4232},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:H\u002FSI:H\u002FSA:N",[4234,4236,4238,4239,4240],{"type":2178,"url":4235},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-jjhc-v7c2-5hh6",{"type":2167,"url":4237},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35030",{"type":2175,"url":2427},{"type":2175,"url":2431},{"type":2167,"url":4241},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjhc-v7c2-5hh6",[2435,2436,2437,2438],{"id":198,"slug":4244,"dossier":45,"summary":4245,"aliases":4246,"sourceIds":4249,"published":4250,"modified":4251,"checkedAt":7,"severity":4252,"references":4255,"versionKeys":4268,"packageCount":32,"repositoryCount":32},"ghsa-jm66-cg57-jjv5-ddb86d58","Azure Core is vulnerable to deserialization of untrusted data",[4247,4248],"CVE-2026-21226","PYSEC-2026-1208",[198,4248],"2026-01-13T21:31:44Z","2026-07-07T17:56:18.326219030Z",[4253],{"type":2163,"score":4254},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4256,4258,4260,4262,4264,4266],{"type":2167,"url":4257},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21226",{"type":2175,"url":4259},"https:\u002F\u002Fgithub.com\u002FAzure\u002Fazure-sdk-for-python",{"type":2178,"url":4261},"https:\u002F\u002Fgithub.com\u002FAzure\u002Fazure-sdk-for-python\u002Fblob\u002F6d2e6431ea0991861640e449e51e894247a7771a\u002Fsdk\u002Fcore\u002Fazure-core\u002FCHANGELOG.md#1380-2026-01-12",{"type":2178,"url":4263},"https:\u002F\u002Fmsrc.microsoft.com\u002Fupdate-guide\u002Fvulnerability\u002FCVE-2026-21226",{"type":2175,"url":4265},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fazure-core",{"type":2167,"url":4267},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jm66-cg57-jjv5",[4269],"pypi:azure-core@1.33.0",{"id":199,"slug":4271,"dossier":45,"summary":4272,"aliases":4273,"sourceIds":4276,"published":4277,"modified":4278,"checkedAt":7,"severity":4279,"references":4282,"versionKeys":4290,"packageCount":32,"repositoryCount":331},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[4274,4275],"CVE-2026-54282","PYSEC-2026-248",[199,4275],"2026-06-15T20:38:08Z","2026-07-15T22:30:44.498280076Z",[4280,4281],{"type":2163,"score":2956},{"type":2163,"score":2268},[4283,4285,4287,4288],{"type":2167,"url":4284},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":2167,"url":4286},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":2175,"url":3155},{"type":2178,"url":4289},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[2221,2222,2223,3162,3163,3219,3220],{"id":200,"slug":4292,"dossier":45,"summary":4293,"aliases":4294,"sourceIds":4297,"published":4298,"modified":4299,"checkedAt":7,"severity":4300,"references":4303,"versionKeys":4322,"packageCount":32,"repositoryCount":116},"ghsa-jpw9-pfvf-9f58-39682a8f","MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal",[4295,4296],"CVE-2026-52869","PYSEC-2026-3482",[200,4296],"2026-07-16T19:58:53Z","2026-07-23T15:11:29.023312800Z",[4301],{"type":2163,"score":4302},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:L",[4304,4306,4308,4310,4312,4314,4316,4317,4319,4320],{"type":2178,"url":4305},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",{"type":2167,"url":4307},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-52869",{"type":2178,"url":4309},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2690",{"type":2178,"url":4311},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2719",{"type":2178,"url":4313},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F1abcca2408a6b50e10ec601181f63f9978705c00",{"type":2178,"url":4315},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002Fce267b6fc515dc4efc1dc70b6975b16ff0feef0a",{"type":2175,"url":3445},{"type":2178,"url":4318},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.27.2",{"type":2175,"url":3449},{"type":2167,"url":4321},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jpw9-pfvf-9f58",[3451,3452],{"id":201,"slug":4324,"dossier":45,"summary":4325,"aliases":4326,"sourceIds":4329,"published":4330,"modified":4331,"checkedAt":7,"severity":4332,"references":4335,"versionKeys":4343,"packageCount":32,"repositoryCount":116},"ghsa-jq35-7prp-9v3f-75660907","PyJWT: Algorithm allow-list bypass when decoding with `PyJWK` \u002F `PyJWKClient` keys",[4327,4328],"CVE-2026-48523","PYSEC-2026-176",[201,4328],"2026-05-28T16:16:29.280Z","2026-06-16T15:44:20.868973576Z",[4333],{"type":2163,"score":4334},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[4336,4338,4340,4341],{"type":3092,"url":4337},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-jq35-7prp-9v3f",{"type":2167,"url":4339},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48523",{"type":2175,"url":3097},{"type":2178,"url":4342},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-176.yaml",[3103,3104],{"id":202,"slug":4345,"dossier":45,"summary":4346,"aliases":4347,"sourceIds":4350,"published":4351,"modified":4352,"checkedAt":7,"severity":4353,"references":4356,"versionKeys":4390,"packageCount":32,"repositoryCount":351},"ghsa-jr27-m4p2-rc6r-4991bc00","Denial of Service in pyasn1 via Unbounded Recursion",[4348,4349],"CVE-2026-30922","PYSEC-2026-2263",[202,4349],"2026-03-17T16:17:33Z","2026-07-21T15:30:39.553074080Z",[4354,4355],{"type":2163,"score":3660},{"type":2163,"score":2238},[4357,4359,4361,4363,4365,4367,4369,4371,4373,4375,4376,4378,4380,4382,4384,4386,4388],{"type":3092,"url":4358},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-jr27-m4p2-rc6r",{"type":2167,"url":4360},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-30922",{"type":2178,"url":4362},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F5a49bd1fe93b5b866a1210f6bf0a3924f21572c8",{"type":2172,"url":4364},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",{"type":2178,"url":4366},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":2178,"url":4368},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22970",{"type":2178,"url":4370},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22987",{"type":2178,"url":4372},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":2178,"url":4374},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":2178,"url":4193},{"type":2178,"url":4377},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:41928",{"type":2178,"url":4379},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6309",{"type":2178,"url":4381},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6568",{"type":2178,"url":4383},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6720",{"type":2178,"url":4385},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6912",{"type":2178,"url":4387},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6926",{"type":2178,"url":4389},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00001.html",[2830],{"id":203,"slug":4392,"dossier":45,"summary":4393,"aliases":4394,"sourceIds":4397,"published":4398,"modified":4399,"checkedAt":7,"severity":4400,"references":4402,"versionKeys":4415,"packageCount":32,"repositoryCount":331},"ghsa-jwv3-5hgf-82ww-d34fc541","python-cryptography: Duplicate self-signed intermediates can cause exponential path-building",[4395,4396],"CVE-2026-69249","PYSEC-2026-3553",[203,4396],"2026-08-03T21:26:50Z","2026-08-05T08:56:56.745489939Z",[4401],{"type":2235,"score":2664},[4403,4405,4407,4409,4410,4411,4413],{"type":2178,"url":4404},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",{"type":2178,"url":4406},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14960",{"type":2178,"url":4408},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4a12cf49675a184e47f912b00b04f3a629283582",{"type":2175,"url":2562},{"type":2175,"url":3129},{"type":2167,"url":4412},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",{"type":2167,"url":4414},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69249",[2566,2567,2568,2569,2570,2571,3819],{"id":204,"slug":4417,"dossier":45,"summary":4418,"aliases":4419,"sourceIds":4422,"published":4423,"modified":4424,"checkedAt":7,"severity":4425,"references":4428,"versionKeys":4441,"packageCount":32,"repositoryCount":331},"ghsa-m2h6-j472-rp4c-112d8b91","python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees",[4420,4421],"CVE-2026-69248","PYSEC-2026-3554",[204,4421],"2026-08-03T21:26:57Z","2026-08-05T08:56:57.182506215Z",[4426],{"type":2235,"score":4427},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[4429,4431,4433,4435,4436,4437,4439],{"type":2178,"url":4430},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",{"type":2178,"url":4432},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14888",{"type":2178,"url":4434},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4d035a4225965edeffd312079a510ef25fcfdcb2",{"type":2175,"url":2562},{"type":2175,"url":3129},{"type":2167,"url":4438},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",{"type":2167,"url":4440},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69248",[2566,2567,2568,2569,2570,2571,3819],{"id":205,"slug":4443,"dossier":45,"summary":4444,"aliases":4445,"sourceIds":4448,"published":4449,"modified":4450,"checkedAt":7,"severity":4451,"references":4453,"versionKeys":4464,"packageCount":32,"repositoryCount":331},"ghsa-m4p7-r5rc-7g4j-889a943d","pyasn1 BER\u002FCER\u002FDER decoder denial of service via unbounded long-form tag IDs",[4446,4447],"CVE-2026-59884","PYSEC-2026-3455",[205,4447],"2026-07-14T17:17:14.750Z","2026-08-02T02:59:55.269509518Z",[4452],{"type":2163,"score":2238},[4454,4456,4458,4460,4461,4462],{"type":2167,"url":4455},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-m4p7-r5rc-7g4j",{"type":2167,"url":4457},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59884",{"type":2172,"url":4459},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F628e36ecbb5277a3f01572ce418ef54271b165a5",{"type":2175,"url":2822},{"type":2167,"url":3318},{"type":2178,"url":4463},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyasn1\u002FPYSEC-2026-3455.yaml",[2830,3320],{"id":206,"slug":4466,"dossier":45,"summary":4467,"aliases":4468,"sourceIds":4471,"published":4472,"modified":4473,"checkedAt":7,"severity":4474,"references":4479,"versionKeys":4488,"packageCount":32,"repositoryCount":320},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[4469,4470],"CVE-2026-34516","PYSEC-2026-2098",[206,4470],"2026-04-01T21:16:59.723Z","2026-07-13T07:26:19.821892403Z",[4475,4476,4477],{"type":2163,"score":2238},{"type":2235,"score":2398},{"type":2235,"score":4478},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4480,4482,4484,4486,4487],{"type":2172,"url":4481},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":2167,"url":4483},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":2172,"url":4485},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":2175,"url":2243},{"type":2167,"url":2278},[2247,2248,2249,2250,2251,2252,2253,2254],{"id":207,"slug":4490,"dossier":45,"summary":4491,"aliases":4492,"sourceIds":4495,"published":4496,"modified":4497,"checkedAt":7,"severity":4498,"references":4501,"versionKeys":4507,"packageCount":32,"repositoryCount":320},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[4493,4494],"CVE-2026-50269","PYSEC-2026-2106",[207,4494],"2026-06-15T20:07:26Z","2026-07-13T07:26:17.983947245Z",[4499,4500],{"type":2235,"score":2266},{"type":2163,"score":2238},[4502,4504,4506],{"type":2167,"url":4503},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":2172,"url":4505},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":2175,"url":2243},[2247,2248,2249,2250,2251,2252,2253,2254],{"id":208,"slug":4509,"dossier":45,"summary":4510,"aliases":4511,"sourceIds":4514,"published":4515,"modified":4516,"checkedAt":7,"severity":4517,"references":4521,"versionKeys":4529,"packageCount":32,"repositoryCount":351},"ghsa-m959-cc7f-wv43-3b497c67","cryptography has incomplete DNS name constraint enforcement on peer names",[4512,4513],"CVE-2026-34073","PYSEC-2026-35",[208,4513],"2026-03-27T19:56:21Z","2026-06-05T18:00:13.915417385Z",[4518,4519],{"type":2163,"score":2268},{"type":2235,"score":4520},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[4522,4524,4526,4527],{"type":2167,"url":4523},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m959-cc7f-wv43",{"type":2167,"url":4525},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34073",{"type":2175,"url":2562},{"type":2178,"url":4528},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-35.yaml",[2566,2567,2568,2569,2570,2571],{"id":209,"slug":4531,"dossier":45,"summary":4532,"aliases":4533,"sourceIds":4536,"published":4537,"modified":4538,"checkedAt":7,"severity":4539,"references":4542,"versionKeys":4550,"packageCount":32,"repositoryCount":390},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[4534,4535],"CVE-2026-44432","PYSEC-2026-142",[209,4535],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[4540,4541],{"type":2163,"score":2238},{"type":2235,"score":2291},[4543,4545,4547,4549],{"type":2167,"url":4544},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":2167,"url":4546},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":2178,"url":4548},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":2175,"url":2300},[4551],"pypi:urllib3@2.6.3",{"id":210,"slug":4553,"dossier":45,"summary":4554,"aliases":4555,"sourceIds":4558,"published":4559,"modified":4560,"checkedAt":7,"severity":4561,"references":4564,"versionKeys":4577,"packageCount":32,"repositoryCount":3623},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[4556,4557],"CVE-2026-28684","PYSEC-2026-2270",[210,4557],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[4562],{"type":2163,"score":4563},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[4565,4567,4569,4571,4573,4575],{"type":2172,"url":4566},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":2167,"url":4568},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":2172,"url":4570},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":2178,"url":4572},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":2175,"url":4574},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":2167,"url":4576},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[4578,4579,4580,4581],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":211,"slug":4583,"dossier":45,"summary":4584,"aliases":4585,"sourceIds":4588,"published":4589,"modified":4590,"checkedAt":7,"severity":4591,"references":4594,"versionKeys":4609,"packageCount":32,"repositoryCount":3623},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[4586,4587],"CVE-2026-69243","PYSEC-2026-3546",[211,4587],"2026-08-03T20:46:10Z","2026-08-04T21:26:59.595519014Z",[4592],{"type":2235,"score":4593},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4595,4597,4599,4601,4602,4604,4605,4607],{"type":2178,"url":4596},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":2178,"url":4598},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":2178,"url":4600},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":2175,"url":2243},{"type":2178,"url":4603},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":2175,"url":2615},{"type":2167,"url":4606},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":2167,"url":4608},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[2247,2248,2249,2250,2251,2252,2253,2254,3622],{"id":212,"slug":4611,"dossier":45,"summary":4612,"aliases":4613,"sourceIds":4616,"published":4617,"modified":4618,"checkedAt":7,"severity":4619,"references":4621,"versionKeys":4632,"packageCount":32,"repositoryCount":370},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[4614,4615],"CVE-2026-40347","PYSEC-2026-3038",[212,4615],"2026-04-15T19:45:44Z","2026-07-13T16:43:05.220439399Z",[4620],{"type":2163,"score":2202},[4622,4624,4626,4627,4629,4630],{"type":2178,"url":4623},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":2167,"url":4625},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":2175,"url":2673},{"type":2178,"url":4628},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":2175,"url":2675},{"type":2167,"url":4631},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[2729,2730,2679],{"id":213,"slug":4634,"dossier":45,"summary":4635,"aliases":4636,"sourceIds":4639,"published":4640,"modified":4641,"checkedAt":7,"severity":4642,"references":4644,"versionKeys":4657,"packageCount":32,"repositoryCount":3623},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[4637,4638],"CVE-2026-59881","PYSEC-2026-3547",[213,4638],"2026-08-03T20:40:55Z","2026-08-04T21:27:00.153248525Z",[4643],{"type":2235,"score":2843},[4645,4647,4649,4651,4653,4654,4655],{"type":2178,"url":4646},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":2167,"url":4648},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":2178,"url":4650},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":2178,"url":4652},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":2175,"url":2243},{"type":2175,"url":2615},{"type":2167,"url":4656},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[2247,2248,2249,2250,2251,2252,2253,2254,3622],{"id":214,"slug":4659,"dossier":45,"summary":4660,"aliases":4661,"sourceIds":4664,"published":4665,"modified":4666,"checkedAt":7,"severity":4667,"references":4669,"versionKeys":4680,"packageCount":32,"repositoryCount":351},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[4662,4663],"CVE-2025-69225","PYSEC-2026-1109",[214,4663],"2026-01-05T23:09:30Z","2026-07-07T17:56:18.569417663Z",[4668],{"type":2235,"score":2266},[4670,4672,4674,4676,4677,4678],{"type":2178,"url":4671},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":2167,"url":4673},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":2172,"url":4675},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":2175,"url":2243},{"type":2175,"url":2615},{"type":2167,"url":4679},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[2247,2248,2249,2250,2251,2252,2253],{"id":215,"slug":4682,"dossier":45,"summary":4683,"aliases":4684,"sourceIds":4688,"published":4689,"modified":4690,"checkedAt":7,"severity":4691,"references":4694,"versionKeys":4727,"packageCount":32,"repositoryCount":116},"ghsa-mrfv-m5wm-5w6w-824b9281","libsodium has Incomplete List of Disallowed Inputs",[4685,4686,4687],"CVE-2025-69277","PYSEC-2026-1448","PYSEC-2026-3002",[215,4687],"2025-12-31T06:30:18Z","2026-07-13T16:43:23.604670369Z",[4692],{"type":2163,"score":4693},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[4695,4697,4699,4701,4703,4705,4707,4709,4711,4713,4715,4717,4719,4721,4723,4725],{"type":2167,"url":4696},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69277",{"type":2178,"url":4698},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fpynacl\u002Fissues\u002F920",{"type":2178,"url":4700},"https:\u002F\u002Fgithub.com\u002Fhdwallet-io\u002Fpython-hdwallet\u002Fpull\u002F124",{"type":2178,"url":4702},"https:\u002F\u002Fgithub.com\u002Fjedisct1\u002Flibsodium\u002Fcommit\u002Fad3004ec8731730e93fcfbbc824e67eadc1c1bae",{"type":2178,"url":4704},"https:\u002F\u002Fgithub.com\u002Fparagonie\u002Fsodium_compat\u002Fcommit\u002F2cb48f26130919f92f30650bdcc30e6f4ebe45ac",{"type":2178,"url":4706},"https:\u002F\u002Fgithub.com\u002Fparagonie\u002Fsodium_compat\u002Fcommit\u002F4714da6efdc782c06690bc72ce34fae7941c2d9f",{"type":2178,"url":4708},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fpynacl\u002Fcommit\u002F96314884d88d1089ff5f336dba61d7abbcddbbf7",{"type":2178,"url":4710},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fpynacl\u002Fcommit\u002Fecf41f55a3d8f1e10ce89c61c4b4d67f3f4467cf",{"type":2178,"url":4712},"https:\u002F\u002F00f.net\u002F2025\u002F12\u002F30\u002Flibsodium-vulnerability",{"type":2178,"url":4714},"https:\u002F\u002Fgithub.com\u002FFriendsOfPHP\u002Fsecurity-advisories\u002Fblob\u002Fmaster\u002Fparagonie\u002Fsodium_compat\u002F2025-12-30.yaml",{"type":2175,"url":4716},"https:\u002F\u002Fgithub.com\u002Fparagonie\u002Fsodium_compat",{"type":2178,"url":4718},"https:\u002F\u002Fianix.com\u002Fpub\u002Fed25519-deployment.html",{"type":2178,"url":4720},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00004.html",{"type":2178,"url":4722},"https:\u002F\u002Fnews.ycombinator.com\u002Fitem?id=46435614",{"type":2175,"url":4724},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpynacl",{"type":2167,"url":4726},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mrfv-m5wm-5w6w",[4728],"pypi:pynacl@1.5.0",{"id":216,"slug":4730,"dossier":45,"summary":4731,"aliases":4732,"sourceIds":4735,"published":4736,"modified":4737,"checkedAt":7,"severity":4738,"references":4741,"versionKeys":4750,"packageCount":32,"repositoryCount":320},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[4733,4734],"CVE-2026-34519","PYSEC-2026-2101",[216,4734],"2026-04-01T21:17:00.170Z","2026-07-13T07:26:39.246105773Z",[4739,4740],{"type":2235,"score":2266},{"type":2163,"score":2268},[4742,4744,4746,4748,4749],{"type":2172,"url":4743},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":2167,"url":4745},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":2172,"url":4747},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":2175,"url":2243},{"type":2167,"url":2278},[2247,2248,2249,2250,2251,2252,2253,2254],{"id":217,"slug":4752,"dossier":45,"summary":4753,"aliases":4754,"sourceIds":4757,"published":4758,"modified":4759,"checkedAt":7,"severity":4760,"references":4763,"versionKeys":4771,"packageCount":32,"repositoryCount":390},"ghsa-p423-j2cm-9vmq-1455bc4c","Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs",[4755,4756],"CVE-2026-39892","PYSEC-2026-36",[217,4756],"2026-04-08T19:23:08Z","2026-06-05T18:00:15.295914184Z",[4761,4762],{"type":2235,"score":2843},{"type":2163,"score":2486},[4764,4766,4768,4769],{"type":2167,"url":4765},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-p423-j2cm-9vmq",{"type":2167,"url":4767},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39892",{"type":2175,"url":2562},{"type":2178,"url":4770},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-36.yaml",[2570,2571],{"id":218,"slug":4773,"dossier":45,"summary":4774,"aliases":4775,"sourceIds":4778,"published":4779,"modified":4780,"checkedAt":7,"severity":4781,"references":4784,"versionKeys":4793,"packageCount":32,"repositoryCount":320},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[4776,4777],"CVE-2026-34515","PYSEC-2026-2097",[218,4777],"2026-04-01T21:16:59.570Z","2026-07-13T07:26:55.790859426Z",[4782,4783],{"type":2235,"score":4041},{"type":2163,"score":4043},[4785,4787,4789,4791,4792],{"type":2172,"url":4786},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":2167,"url":4788},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":2172,"url":4790},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":2175,"url":2243},{"type":2167,"url":2278},[2247,2248,2249,2250,2251,2252,2253,2254],{"id":219,"slug":4795,"dossier":45,"summary":4796,"aliases":4797,"sourceIds":4800,"published":4801,"modified":4802,"checkedAt":7,"severity":4803,"references":4805,"versionKeys":4814,"packageCount":32,"repositoryCount":370},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[4798,4799],"CVE-2026-42561","PYSEC-2026-3039",[219,4799],"2026-05-06T21:56:14Z","2026-07-13T16:42:24.725022295Z",[4804],{"type":2163,"score":2238},[4806,4808,4810,4811,4812],{"type":2178,"url":4807},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":2167,"url":4809},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":2175,"url":2673},{"type":2175,"url":2675},{"type":2167,"url":4813},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[2729,2730,2679],{"id":220,"slug":4816,"dossier":45,"summary":4817,"aliases":4818,"sourceIds":4821,"published":4822,"modified":4823,"checkedAt":7,"severity":4824,"references":4826,"versionKeys":4838,"packageCount":32,"repositoryCount":351},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[4819,4820],"CVE-2025-50181","PYSEC-2026-1999",[220,4820],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[4825],{"type":2163,"score":2372},[4827,4829,4831,4833,4834,4835,4836],{"type":2178,"url":4828},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":2167,"url":4830},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":2172,"url":4832},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":2175,"url":2300},{"type":2178,"url":2382},{"type":2175,"url":2302},{"type":2167,"url":4837},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[2306,2307,2308,2309],{"id":221,"slug":4840,"dossier":45,"summary":4841,"aliases":4842,"sourceIds":4845,"published":4846,"modified":4847,"checkedAt":7,"severity":4848,"references":4852,"versionKeys":4865,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[4843,4844],"CVE-2024-56326","PYSEC-2026-1475",[221,4844],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[4849,4851],{"type":2163,"score":4850},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2235,"score":3573},[4853,4855,4857,4859,4860,4861,4862,4863],{"type":2178,"url":4854},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":2167,"url":4856},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":2172,"url":4858},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":2175,"url":3582},{"type":2178,"url":3954},{"type":2178,"url":3584},{"type":2175,"url":3588},{"type":2167,"url":4864},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[3592],{"id":222,"slug":4867,"dossier":89,"summary":4868,"aliases":4869,"sourceIds":4872,"published":4873,"modified":4874,"checkedAt":7,"severity":4875,"references":4878,"versionKeys":4884,"packageCount":32,"repositoryCount":3906},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[4870,4871],"CVE-2026-44431","PYSEC-2026-141",[222,4871],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[4876,4877],{"type":2163,"score":3388},{"type":2235,"score":3804},[4879,4881,4883],{"type":2167,"url":4880},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":2167,"url":4882},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":2175,"url":2300},[2306,2307,2308,2309,2310,4551],{"id":223,"slug":4886,"dossier":45,"summary":4887,"aliases":4888,"sourceIds":4891,"published":4892,"modified":4893,"checkedAt":7,"severity":4894,"references":4897,"versionKeys":4912,"packageCount":32,"repositoryCount":40},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[4889,4890],"CVE-2026-22701","PYSEC-2026-1374",[223,4890],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[4895],{"type":2163,"score":4896},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[4898,4900,4902,4904,4906,4908,4910],{"type":2178,"url":4899},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":2167,"url":4901},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":2178,"url":4903},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":2178,"url":4905},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":2175,"url":4907},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":2175,"url":4909},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":2167,"url":4911},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[4913,4914,4915,4916],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":224,"slug":4918,"dossier":45,"summary":4919,"aliases":4920,"sourceIds":4923,"published":4924,"modified":4925,"checkedAt":7,"severity":4926,"references":4930,"versionKeys":4953,"packageCount":32,"repositoryCount":34},"ghsa-qrc4-49gv-mv9m-c7358be2","LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit",[4921,4922],"CVE-2026-47101","PYSEC-2026-2598",[224,4922],"2026-05-21T21:30:36Z","2026-07-13T16:42:56.741599701Z",[4927,4928],{"type":2163,"score":3941},{"type":2235,"score":4929},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4931,4933,4935,4937,4939,4941,4942,4944,4946,4948,4950,4951],{"type":2167,"url":4932},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47101",{"type":2178,"url":4934},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F2220f3076ac89bd2a2e3439acf57dcfbec2434c9",{"type":2178,"url":4936},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F5190bd07eb23a037745d86328096f54378f1614a",{"type":2178,"url":4938},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002Fd910a95661fce3cdd36f3b06c03ecf9c46c6457c",{"type":2178,"url":4940},"https:\u002F\u002Fgist.github.com\u002F13ph03nix\u002F9ec616e1fdc77b3673509c60206e827f",{"type":2175,"url":2427},{"type":2178,"url":4943},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.83.14-stable",{"type":2178,"url":4945},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F8e75edfb-ff05-4e63-bfca-2d93d03fb3b9",{"type":2178,"url":4947},"https:\u002F\u002Fwww.obsidiansecurity.com\u002Fblog\u002Flitellm-privilege-escalation-rce",{"type":2178,"url":4949},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Flitellm-privilege-escalation-via-api-key-generation",{"type":2175,"url":2431},{"type":2167,"url":4952},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qrc4-49gv-mv9m",[2435,2436,2437,2438],{"id":225,"slug":4955,"dossier":45,"summary":4956,"aliases":4957,"sourceIds":4960,"published":4961,"modified":4962,"checkedAt":7,"severity":4963,"references":4968,"versionKeys":5007,"packageCount":32,"repositoryCount":351},"ghsa-r6ph-v2qm-q3c2-c75907df","cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves",[4958,4959],"CVE-2026-26007","PYSEC-2026-2141",[225,4959],"2026-02-10T21:27:06Z","2026-07-13T07:26:47.289183808Z",[4964,4966],{"type":2235,"score":4965},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"type":2163,"score":4967},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4969,4971,4973,4975,4976,4978,4980,4982,4983,4985,4987,4989,4991,4993,4995,4997,4999,5001,5003,5005],{"type":2178,"url":4970},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-r6ph-v2qm-q3c2",{"type":2167,"url":4972},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26007",{"type":2178,"url":4974},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c",{"type":2175,"url":2562},{"type":2178,"url":4977},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Freleases\u002Ftag\u002F46.0.5",{"type":2178,"url":4979},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-26007",{"type":2178,"url":4981},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-26007.json",{"type":2167,"url":4366},{"type":2167,"url":4984},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:12176",{"type":2167,"url":4986},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13512",{"type":2167,"url":4988},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":2167,"url":4990},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":2167,"url":4992},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13672",{"type":2167,"url":4994},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19355",{"type":2167,"url":4996},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21431",{"type":2167,"url":4998},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21517",{"type":2167,"url":5000},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22330",{"type":2167,"url":5002},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22993",{"type":2167,"url":5004},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:2694",{"type":2167,"url":5006},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[2566,2567,2568,2569,2570,2571],{"id":226,"slug":5009,"dossier":45,"summary":5010,"aliases":5011,"sourceIds":5014,"published":5015,"modified":5016,"checkedAt":7,"severity":5017,"references":5019,"versionKeys":5028,"packageCount":32,"repositoryCount":370},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[5012,5013],"CVE-2026-53540","PYSEC-2026-3040",[226,5013],"2026-06-15T20:23:45Z","2026-07-13T16:43:20.711288699Z",[5018],{"type":2163,"score":3710},[5020,5022,5023,5024,5026],{"type":2178,"url":5021},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":2175,"url":2673},{"type":2175,"url":2675},{"type":2167,"url":5025},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":2167,"url":5027},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[2729,2730,2679],{"id":227,"slug":5030,"dossier":45,"summary":5031,"aliases":5032,"sourceIds":5035,"published":5036,"modified":5037,"checkedAt":7,"severity":5038,"references":5040,"versionKeys":5051,"packageCount":32,"repositoryCount":370},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[5033,5034],"CVE-2026-53537","PYSEC-2026-3041",[227,5034],"2026-06-15T20:20:51Z","2026-07-15T22:30:45.845963114Z",[5039],{"type":2163,"score":2956},[5041,5043,5045,5046,5048,5050],{"type":2178,"url":5042},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":2167,"url":5044},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":2175,"url":2673},{"type":2167,"url":5047},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":2178,"url":5049},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":2175,"url":2675},[2729,2730,2679],{"id":228,"slug":5053,"dossier":45,"summary":5054,"aliases":5055,"sourceIds":5058,"published":5059,"modified":5060,"checkedAt":7,"severity":5061,"references":5063,"versionKeys":5078,"packageCount":32,"repositoryCount":116},"ghsa-vj7q-gjh5-988w-54882ae8","MCP Python SDK: WebSocket server transport does not support Host\u002FOrigin validation",[5056,5057],"CVE-2026-59950","PYSEC-2026-3483",[228,5057],"2026-07-16T20:14:34Z","2026-07-23T15:11:47.407353087Z",[5062],{"type":2235,"score":3434},[5064,5066,5068,5070,5072,5073,5075,5076],{"type":2178,"url":5065},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",{"type":2167,"url":5067},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59950",{"type":2178,"url":5069},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fpull\u002F2992",{"type":2178,"url":5071},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Fcommit\u002F777b8d06710c140e3606b0d4598e2aa48546c266",{"type":2175,"url":3445},{"type":2178,"url":5074},"https:\u002F\u002Fgithub.com\u002Fmodelcontextprotocol\u002Fpython-sdk\u002Freleases\u002Ftag\u002Fv1.28.1",{"type":2175,"url":3449},{"type":2167,"url":5077},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vj7q-gjh5-988w",[3451,3452],{"id":229,"slug":5080,"dossier":45,"summary":5081,"aliases":5082,"sourceIds":5085,"published":5086,"modified":5087,"checkedAt":7,"severity":5088,"references":5091,"versionKeys":5104,"packageCount":32,"repositoryCount":390},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[5083,5084],"CVE-2025-43859","PYSEC-2026-348",[229,5084],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[5089],{"type":2163,"score":5090},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5092,5094,5096,5098,5100,5102],{"type":2178,"url":5093},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":2167,"url":5095},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":2178,"url":5097},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":2175,"url":5099},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":2175,"url":5101},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":2167,"url":5103},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[5105],"pypi:h11@0.14.0",{"id":230,"slug":5107,"dossier":45,"summary":5108,"aliases":5109,"sourceIds":5112,"published":5113,"modified":5114,"checkedAt":7,"severity":5115,"references":5119,"versionKeys":5128,"packageCount":32,"repositoryCount":320},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[5110,5111],"CVE-2026-22815","PYSEC-2026-2094",[230,5111],"2026-04-01T19:45:17Z","2026-07-13T07:26:28.950069528Z",[5116,5117],{"type":2235,"score":2843},{"type":2235,"score":5118},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5120,5122,5124,5126,5127],{"type":2172,"url":5121},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":2167,"url":5123},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":2172,"url":5125},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":2175,"url":2243},{"type":2167,"url":2278},[2247,2248,2249,2250,2251,2252,2253,2254],{"id":231,"slug":5130,"dossier":45,"summary":5131,"aliases":5132,"sourceIds":5135,"published":5136,"modified":5137,"checkedAt":7,"severity":5138,"references":5140,"versionKeys":5148,"packageCount":32,"repositoryCount":116},"ghsa-w7vc-732c-9m39-90a52664","PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS",[5133,5134],"CVE-2026-48525","PYSEC-2026-178",[231,5134],"2026-05-28T16:16:29.533Z","2026-06-16T15:44:21.139278330Z",[5139],{"type":2163,"score":2202},[5141,5143,5145,5146],{"type":3092,"url":5142},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w7vc-732c-9m39",{"type":2167,"url":5144},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48525",{"type":2175,"url":3097},{"type":2178,"url":5147},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-178.yaml",[3103,3104],{"id":232,"slug":5150,"dossier":45,"summary":5151,"aliases":5152,"sourceIds":5155,"published":5156,"modified":5157,"checkedAt":7,"severity":5158,"references":5161,"versionKeys":5178,"packageCount":32,"repositoryCount":40},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[5153,5154],"CVE-2025-68146","PYSEC-2026-1375",[232,5154],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[5159],{"type":2163,"score":5160},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[5162,5164,5166,5167,5169,5171,5173,5174,5176],{"type":2178,"url":5163},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2178,"url":5165},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":2175,"url":4907},{"type":2178,"url":5168},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":2178,"url":5170},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":2178,"url":5172},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":2175,"url":4909},{"type":2167,"url":5175},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2167,"url":5177},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[4913,4914,4915,4916],{"id":233,"slug":5180,"dossier":45,"summary":5181,"aliases":5182,"sourceIds":5185,"published":5186,"modified":5187,"checkedAt":7,"severity":5188,"references":5191,"versionKeys":5202,"packageCount":32,"repositoryCount":64},"ghsa-w8v5-vhqr-4h9v-05062d37","DiskCache has unsafe pickle deserialization",[5183,5184],"CVE-2025-69872","PYSEC-2026-2447",[233,5184],"2026-02-11T21:30:39Z","2026-07-13T16:43:29.892158838Z",[5189],{"type":2235,"score":5190},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[5192,5194,5196,5198,5200],{"type":2167,"url":5193},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69872",{"type":2178,"url":5195},"https:\u002F\u002Fgithub.com\u002FEthanKim88\u002Fethan-cve-disclosures\u002Fblob\u002Fmain\u002FCVE-2025-69872-DiskCache-Pickle-Deserialization.md",{"type":2175,"url":5197},"https:\u002F\u002Fgithub.com\u002Fgrantjenks\u002Fpython-diskcache",{"type":2175,"url":5199},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdiskcache",{"type":2167,"url":5201},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w8v5-vhqr-4h9v",[5203],"pypi:diskcache@5.6.3",{"id":234,"slug":5205,"dossier":45,"summary":5206,"aliases":5207,"sourceIds":5210,"published":5211,"modified":5212,"checkedAt":7,"severity":5213,"references":5216,"versionKeys":5229,"packageCount":32,"repositoryCount":370},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[5208,5209],"CVE-2026-24486","PYSEC-2026-1852",[234,5209],"2026-01-26T23:28:05Z","2026-07-07T17:57:28.813401667Z",[5214],{"type":2163,"score":5215},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[5217,5219,5221,5223,5224,5226,5227],{"type":2178,"url":5218},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":2167,"url":5220},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":2178,"url":5222},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":2175,"url":2673},{"type":2178,"url":5225},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":2175,"url":2675},{"type":2167,"url":5228},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[2729,2730,2679],{"id":235,"slug":5231,"dossier":45,"summary":5232,"aliases":5233,"sourceIds":5236,"published":5237,"modified":5238,"checkedAt":7,"severity":5239,"references":5242,"versionKeys":5261,"packageCount":32,"repositoryCount":34},"ghsa-wpfp-gwwc-vwq6-53d5ec36","LiteLLM allows a user to modify their own user_role via the \u002Fuser\u002Fupdate endpoint",[5234,5235],"CVE-2026-47102","PYSEC-2026-2600",[235,5235],"2026-05-21T21:30:37Z","2026-07-13T16:43:25.135559552Z",[5240,5241],{"type":2163,"score":3941},{"type":2235,"score":4929},[5243,5245,5247,5249,5251,5252,5253,5254,5255,5256,5258,5259],{"type":2167,"url":5244},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47102",{"type":2178,"url":5246},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fpull\u002F25541",{"type":2178,"url":5248},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F128d32d2494b759c5d15da3452452af4c6a34c01",{"type":2178,"url":5250},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002Fe6f18ce75b111c9b93dc15c72894cbdeb53177ce",{"type":2178,"url":4940},{"type":2175,"url":2427},{"type":2178,"url":2429},{"type":2178,"url":4945},{"type":2178,"url":4947},{"type":2178,"url":5257},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Flitellm-privilege-escalation-via-user-update",{"type":2175,"url":2431},{"type":2167,"url":5260},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wpfp-gwwc-vwq6",[2435,2436,2437,2438],{"id":236,"slug":5263,"dossier":45,"summary":5264,"aliases":5265,"sourceIds":5268,"published":5269,"modified":5270,"checkedAt":7,"severity":5271,"references":5273,"versionKeys":5295,"packageCount":32,"repositoryCount":331},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[5266,5267],"CVE-2026-48818","PYSEC-2026-2281",[236,5267],"2026-06-15T20:16:30Z","2026-07-13T07:26:44.976412482Z",[5272],{"type":2163,"score":4043},[5274,5276,5277,5279,5281,5283,5285,5287,5289,5291,5293],{"type":2167,"url":5275},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":2175,"url":3155},{"type":2178,"url":5278},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":2178,"url":5280},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":2167,"url":5282},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":2167,"url":5284},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":2167,"url":5286},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":2167,"url":5288},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":4195,"url":5290},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":2172,"url":5292},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":2172,"url":5294},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[2221,2222,2223,3162,3163,3219,3220],{"id":237,"slug":5297,"dossier":45,"summary":5298,"aliases":5299,"sourceIds":5302,"published":5303,"modified":5304,"checkedAt":7,"severity":5305,"references":5307,"versionKeys":5314,"packageCount":32,"repositoryCount":331},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[5300,5301],"CVE-2026-48817","PYSEC-2026-2280",[237,5301],"2026-06-15T20:16:05Z","2026-07-13T07:26:54.069698774Z",[5306],{"type":2163,"score":2268},[5308,5310,5312,5313],{"type":2167,"url":5309},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":2167,"url":5311},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":2175,"url":3155},{"type":2167,"url":5288},[2221,2222,2223,3162,3163,3219,3220],{"id":238,"slug":5316,"dossier":45,"summary":5317,"aliases":5318,"sourceIds":5321,"published":5322,"modified":5323,"checkedAt":7,"severity":5324,"references":5327,"versionKeys":5333,"packageCount":32,"repositoryCount":320},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[5319,5320],"CVE-2026-54274","PYSEC-2026-2108",[238,5320],"2026-06-15T20:11:22Z","2026-07-13T07:26:54.330692251Z",[5325,5326],{"type":2235,"score":2398},{"type":2163,"score":2238},[5328,5330,5331],{"type":2167,"url":5329},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":2175,"url":2243},{"type":2172,"url":5332},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[2247,2248,2249,2250,2251,2252,2253,2254],{"id":239,"slug":5335,"dossier":45,"summary":5336,"aliases":5337,"sourceIds":5340,"published":5341,"modified":5342,"checkedAt":7,"severity":5343,"references":5346,"versionKeys":5354,"packageCount":32,"repositoryCount":116},"ghsa-xgmm-8j9v-c9wx-bc6db7ad","PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed",[5338,5339],"CVE-2026-48526","PYSEC-2026-179",[239,5339],"2026-05-28T16:16:29.657Z","2026-06-16T15:44:21.766942950Z",[5344],{"type":2163,"score":5345},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5347,5349,5351,5352],{"type":3092,"url":5348},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-xgmm-8j9v-c9wx",{"type":2167,"url":5350},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48526",{"type":2175,"url":3097},{"type":2178,"url":5353},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-179.yaml",[3103,3104],{"id":240,"slug":5356,"dossier":45,"summary":82,"aliases":5357,"sourceIds":5359,"published":5360,"modified":5361,"checkedAt":7,"severity":5362,"references":5365,"versionKeys":5371,"packageCount":32,"repositoryCount":116},"pysec-2025-183-08217171",[5358],"CVE-2025-45768",[240],"2025-07-31T21:15:27.320Z","2026-05-21T15:00:28.178881228Z",[5363],{"type":2163,"score":5364},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[5366,5368,5370],{"type":2178,"url":5367},"https:\u002F\u002Fgithub.com\u002Fjpadilla",{"type":4195,"url":5369},"https:\u002F\u002Fgist.github.com\u002FZupeiNie\u002F6f65e564f2067b876321d3dfdbb76569",{"type":2175,"url":3097},[3103,3104],{"id":241,"slug":5373,"dossier":45,"summary":82,"aliases":5374,"sourceIds":5377,"published":5378,"modified":5379,"checkedAt":7,"severity":5380,"references":5382,"versionKeys":5387,"packageCount":32,"repositoryCount":32},"pysec-2026-2120-174938a3",[5375,5376],"CVE-2026-31900","GHSA-v53h-f6m7-xcgm",[241],"2026-03-11T20:16:15.960Z","2026-07-13T07:15:15.712525536Z",[5381],{"type":2163,"score":2486},[5383,5385],{"type":2167,"url":5384},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fsecurity\u002Fadvisories\u002FGHSA-v53h-f6m7-xcgm",{"type":2172,"url":5386},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002F0a2560b981364dde4c8cf8ce9d164c40669a8611",[3749],{"id":242,"slug":5389,"dossier":45,"summary":82,"aliases":5390,"sourceIds":5393,"published":5394,"modified":5395,"checkedAt":7,"severity":5396,"references":5398,"versionKeys":5416,"packageCount":32,"repositoryCount":32},"pysec-2026-2121-6227a632",[5391,5392],"CVE-2026-32274","GHSA-3936-cmfr-pm3m",[242],"2026-03-12T20:16:06.350Z","2026-07-13T07:15:15.715288911Z",[5397],{"type":2163,"score":2164},[5399,5401,5403,5404,5405,5406,5408,5410,5412,5414],{"type":2178,"url":5400},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32274",{"type":2178,"url":5402},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32274.json",{"type":2167,"url":4366},{"type":2167,"url":4988},{"type":2167,"url":4990},{"type":2167,"url":5407},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Freleases\u002Ftag\u002F26.3.1",{"type":2167,"url":5409},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fsecurity\u002Fadvisories\u002FGHSA-3936-cmfr-pm3m",{"type":4195,"url":5411},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2447111",{"type":2172,"url":5413},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fcommit\u002F4937fe6cf241139ddbfc16b0bdbb5b422798909d",{"type":2172,"url":5415},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Fblack\u002Fpull\u002F5038",[3749],{"id":243,"slug":5418,"dossier":89,"summary":82,"aliases":5419,"sourceIds":5422,"published":5423,"modified":5424,"checkedAt":7,"severity":5425,"references":5428,"versionKeys":5441,"packageCount":32,"repositoryCount":5448},"pysec-2026-2132-627bf7c7",[5420,5421],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[243],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[5426],{"type":2163,"score":5427},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5429,5431,5433,5434,5435,5437,5439],{"type":2178,"url":5430},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":2178,"url":5432},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":2167,"url":4372},{"type":2167,"url":4374},{"type":4195,"url":5436},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":2172,"url":5438},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":3092,"url":5440},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[5442,5443,5444,5445,5446,5447],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",14,1786588638775]